mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
1297 lines
105 KiB
Plaintext
1297 lines
105 KiB
Plaintext
nodes
|
|
| addEventListener.js:1:43:1:47 | event |
|
|
| addEventListener.js:1:43:1:47 | event |
|
|
| addEventListener.js:2:20:2:24 | event |
|
|
| addEventListener.js:2:20:2:29 | event.data |
|
|
| addEventListener.js:2:20:2:29 | event.data |
|
|
| addEventListener.js:5:43:5:48 | data |
|
|
| addEventListener.js:5:43:5:48 | {data} |
|
|
| addEventListener.js:5:43:5:48 | {data} |
|
|
| addEventListener.js:5:44:5:47 | data |
|
|
| addEventListener.js:6:20:6:23 | data |
|
|
| addEventListener.js:6:20:6:23 | data |
|
|
| addEventListener.js:10:21:10:25 | event |
|
|
| addEventListener.js:10:21:10:25 | event |
|
|
| addEventListener.js:12:24:12:28 | event |
|
|
| addEventListener.js:12:24:12:33 | event.data |
|
|
| addEventListener.js:12:24:12:33 | event.data |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() |
|
|
| angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params |
|
|
| angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams |
|
|
| angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:25:44:25:71 | this.ro ... ragment |
|
|
| angular2-client.ts:25:44:25:71 | this.ro ... ragment |
|
|
| angular2-client.ts:25:44:25:71 | this.ro ... ragment |
|
|
| angular2-client.ts:26:44:26:82 | this.ro ... ('foo') |
|
|
| angular2-client.ts:26:44:26:82 | this.ro ... ('foo') |
|
|
| angular2-client.ts:26:44:26:82 | this.ro ... ('foo') |
|
|
| angular2-client.ts:27:44:27:87 | this.ro ... ('foo') |
|
|
| angular2-client.ts:27:44:27:87 | this.ro ... ('foo') |
|
|
| angular2-client.ts:27:44:27:87 | this.ro ... ('foo') |
|
|
| angular2-client.ts:29:46:29:59 | map.get('foo') |
|
|
| angular2-client.ts:29:46:29:59 | map.get('foo') |
|
|
| angular2-client.ts:29:46:29:59 | map.get('foo') |
|
|
| angular2-client.ts:32:44:32:74 | this.ro ... 1].path |
|
|
| angular2-client.ts:32:44:32:74 | this.ro ... 1].path |
|
|
| angular2-client.ts:32:44:32:74 | this.ro ... 1].path |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters |
|
|
| angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:34:44:34:91 | this.ro ... et('x') |
|
|
| angular2-client.ts:34:44:34:91 | this.ro ... et('x') |
|
|
| angular2-client.ts:34:44:34:91 | this.ro ... et('x') |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params |
|
|
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:37:44:37:58 | this.router.url |
|
|
| angular2-client.ts:37:44:37:58 | this.router.url |
|
|
| angular2-client.ts:37:44:37:58 | this.router.url |
|
|
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
|
|
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
|
|
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
|
|
| classnames.js:7:31:7:84 | `<span ... <span>` |
|
|
| classnames.js:7:31:7:84 | `<span ... <span>` |
|
|
| classnames.js:7:47:7:69 | classNa ... w.name) |
|
|
| classnames.js:7:58:7:68 | window.name |
|
|
| classnames.js:7:58:7:68 | window.name |
|
|
| classnames.js:8:31:8:85 | `<span ... <span>` |
|
|
| classnames.js:8:31:8:85 | `<span ... <span>` |
|
|
| classnames.js:8:47:8:70 | classNa ... w.name) |
|
|
| classnames.js:8:59:8:69 | window.name |
|
|
| classnames.js:8:59:8:69 | window.name |
|
|
| classnames.js:9:31:9:85 | `<span ... <span>` |
|
|
| classnames.js:9:31:9:85 | `<span ... <span>` |
|
|
| classnames.js:9:47:9:70 | classNa ... w.name) |
|
|
| classnames.js:9:59:9:69 | window.name |
|
|
| classnames.js:9:59:9:69 | window.name |
|
|
| classnames.js:10:45:10:55 | window.name |
|
|
| classnames.js:10:45:10:55 | window.name |
|
|
| classnames.js:11:31:11:79 | `<span ... <span>` |
|
|
| classnames.js:11:31:11:79 | `<span ... <span>` |
|
|
| classnames.js:11:47:11:64 | unsafeStyle('foo') |
|
|
| classnames.js:13:31:13:83 | `<span ... <span>` |
|
|
| classnames.js:13:31:13:83 | `<span ... <span>` |
|
|
| classnames.js:13:47:13:68 | safeSty ... w.name) |
|
|
| classnames.js:13:57:13:67 | window.name |
|
|
| classnames.js:13:57:13:67 | window.name |
|
|
| classnames.js:15:31:15:78 | `<span ... <span>` |
|
|
| classnames.js:15:31:15:78 | `<span ... <span>` |
|
|
| classnames.js:15:47:15:63 | clsx(window.name) |
|
|
| classnames.js:15:52:15:62 | window.name |
|
|
| classnames.js:15:52:15:62 | window.name |
|
|
| jquery.js:2:7:2:40 | tainted |
|
|
| jquery.js:2:7:2:40 | tainted |
|
|
| jquery.js:2:17:2:33 | document.location |
|
|
| jquery.js:2:17:2:33 | document.location |
|
|
| jquery.js:2:17:2:40 | documen ... .search |
|
|
| jquery.js:2:17:2:40 | documen ... .search |
|
|
| jquery.js:2:17:2:40 | documen ... .search |
|
|
| jquery.js:7:5:7:34 | "<div i ... + "\\">" |
|
|
| jquery.js:7:5:7:34 | "<div i ... + "\\">" |
|
|
| jquery.js:7:20:7:26 | tainted |
|
|
| jquery.js:8:18:8:34 | "XSS: " + tainted |
|
|
| jquery.js:8:18:8:34 | "XSS: " + tainted |
|
|
| jquery.js:8:28:8:34 | tainted |
|
|
| jquery.js:10:5:10:40 | "<b>" + ... "</b>" |
|
|
| jquery.js:10:5:10:40 | "<b>" + ... "</b>" |
|
|
| jquery.js:10:13:10:20 | location |
|
|
| jquery.js:10:13:10:20 | location |
|
|
| jquery.js:10:13:10:31 | location.toString() |
|
|
| jquery.js:14:19:14:58 | decodeU ... n.hash) |
|
|
| jquery.js:14:19:14:58 | decodeU ... n.hash) |
|
|
| jquery.js:14:38:14:52 | window.location |
|
|
| jquery.js:14:38:14:52 | window.location |
|
|
| jquery.js:14:38:14:57 | window.location.hash |
|
|
| jquery.js:15:19:15:60 | decodeU ... search) |
|
|
| jquery.js:15:19:15:60 | decodeU ... search) |
|
|
| jquery.js:15:38:15:52 | window.location |
|
|
| jquery.js:15:38:15:52 | window.location |
|
|
| jquery.js:15:38:15:59 | window. ... .search |
|
|
| jquery.js:16:19:16:64 | decodeU ... ring()) |
|
|
| jquery.js:16:19:16:64 | decodeU ... ring()) |
|
|
| jquery.js:16:38:16:52 | window.location |
|
|
| jquery.js:16:38:16:52 | window.location |
|
|
| jquery.js:16:38:16:63 | window. ... tring() |
|
|
| nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| nodemailer.js:13:50:13:66 | req.query.message |
|
|
| nodemailer.js:13:50:13:66 | req.query.message |
|
|
| optionalSanitizer.js:2:7:2:39 | target |
|
|
| optionalSanitizer.js:2:16:2:32 | document.location |
|
|
| optionalSanitizer.js:2:16:2:32 | document.location |
|
|
| optionalSanitizer.js:2:16:2:39 | documen ... .search |
|
|
| optionalSanitizer.js:6:18:6:23 | target |
|
|
| optionalSanitizer.js:6:18:6:23 | target |
|
|
| optionalSanitizer.js:8:7:8:22 | tainted |
|
|
| optionalSanitizer.js:8:17:8:22 | target |
|
|
| optionalSanitizer.js:9:18:9:24 | tainted |
|
|
| optionalSanitizer.js:9:18:9:24 | tainted |
|
|
| optionalSanitizer.js:15:9:15:14 | target |
|
|
| optionalSanitizer.js:16:18:16:18 | x |
|
|
| optionalSanitizer.js:17:20:17:20 | x |
|
|
| optionalSanitizer.js:17:20:17:20 | x |
|
|
| optionalSanitizer.js:26:7:26:39 | target |
|
|
| optionalSanitizer.js:26:16:26:32 | document.location |
|
|
| optionalSanitizer.js:26:16:26:32 | document.location |
|
|
| optionalSanitizer.js:26:16:26:39 | documen ... .search |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 |
|
|
| optionalSanitizer.js:31:18:31:23 | target |
|
|
| optionalSanitizer.js:32:18:32:25 | tainted2 |
|
|
| optionalSanitizer.js:32:18:32:25 | tainted2 |
|
|
| optionalSanitizer.js:34:5:34:36 | tainted2 |
|
|
| optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) |
|
|
| optionalSanitizer.js:34:28:34:35 | tainted2 |
|
|
| optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 |
|
|
| optionalSanitizer.js:38:18:38:23 | target |
|
|
| optionalSanitizer.js:39:18:39:25 | tainted3 |
|
|
| optionalSanitizer.js:39:18:39:25 | tainted3 |
|
|
| optionalSanitizer.js:41:5:41:36 | tainted3 |
|
|
| optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) |
|
|
| optionalSanitizer.js:41:28:41:35 | tainted3 |
|
|
| optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) |
|
|
| optionalSanitizer.js:45:41:45:46 | target |
|
|
| optionalSanitizer.js:45:51:45:56 | target |
|
|
| react-native.js:7:7:7:33 | tainted |
|
|
| react-native.js:7:17:7:33 | req.param("code") |
|
|
| react-native.js:7:17:7:33 | req.param("code") |
|
|
| react-native.js:8:18:8:24 | tainted |
|
|
| react-native.js:8:18:8:24 | tainted |
|
|
| react-native.js:9:27:9:33 | tainted |
|
|
| react-native.js:9:27:9:33 | tainted |
|
|
| react-use-context.js:10:22:10:32 | window.name |
|
|
| react-use-context.js:10:22:10:32 | window.name |
|
|
| react-use-context.js:10:22:10:32 | window.name |
|
|
| react-use-context.js:16:26:16:36 | window.name |
|
|
| react-use-context.js:16:26:16:36 | window.name |
|
|
| react-use-context.js:16:26:16:36 | window.name |
|
|
| react-use-state.js:4:9:4:49 | state |
|
|
| react-use-state.js:4:10:4:14 | state |
|
|
| react-use-state.js:4:38:4:48 | window.name |
|
|
| react-use-state.js:4:38:4:48 | window.name |
|
|
| react-use-state.js:5:51:5:55 | state |
|
|
| react-use-state.js:5:51:5:55 | state |
|
|
| react-use-state.js:9:9:9:43 | state |
|
|
| react-use-state.js:9:10:9:14 | state |
|
|
| react-use-state.js:10:14:10:24 | window.name |
|
|
| react-use-state.js:10:14:10:24 | window.name |
|
|
| react-use-state.js:11:51:11:55 | state |
|
|
| react-use-state.js:11:51:11:55 | state |
|
|
| react-use-state.js:15:9:15:43 | state |
|
|
| react-use-state.js:15:10:15:14 | state |
|
|
| react-use-state.js:16:20:16:30 | window.name |
|
|
| react-use-state.js:16:20:16:30 | window.name |
|
|
| react-use-state.js:17:51:17:55 | state |
|
|
| react-use-state.js:17:51:17:55 | state |
|
|
| react-use-state.js:21:10:21:14 | state |
|
|
| react-use-state.js:22:14:22:17 | prev |
|
|
| react-use-state.js:23:35:23:38 | prev |
|
|
| react-use-state.js:23:35:23:38 | prev |
|
|
| react-use-state.js:25:20:25:30 | window.name |
|
|
| react-use-state.js:25:20:25:30 | window.name |
|
|
| sanitiser.js:16:7:16:27 | tainted |
|
|
| sanitiser.js:16:17:16:27 | window.name |
|
|
| sanitiser.js:16:17:16:27 | window.name |
|
|
| sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:23:29:23:35 | tainted |
|
|
| sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:30:29:30:35 | tainted |
|
|
| sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:33:29:33:35 | tainted |
|
|
| sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:38:29:38:35 | tainted |
|
|
| sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:45:29:45:35 | tainted |
|
|
| stored-xss.js:2:39:2:55 | document.location |
|
|
| stored-xss.js:2:39:2:55 | document.location |
|
|
| stored-xss.js:2:39:2:62 | documen ... .search |
|
|
| stored-xss.js:3:35:3:51 | document.location |
|
|
| stored-xss.js:3:35:3:51 | document.location |
|
|
| stored-xss.js:3:35:3:58 | documen ... .search |
|
|
| stored-xss.js:5:20:5:52 | session ... ssion') |
|
|
| stored-xss.js:5:20:5:52 | session ... ssion') |
|
|
| stored-xss.js:8:20:8:48 | localSt ... local') |
|
|
| stored-xss.js:8:20:8:48 | localSt ... local') |
|
|
| stored-xss.js:10:9:10:44 | href |
|
|
| stored-xss.js:10:16:10:44 | localSt ... local') |
|
|
| stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" |
|
|
| stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" |
|
|
| stored-xss.js:12:35:12:38 | href |
|
|
| string-manipulations.js:3:16:3:32 | document.location |
|
|
| string-manipulations.js:3:16:3:32 | document.location |
|
|
| string-manipulations.js:3:16:3:32 | document.location |
|
|
| string-manipulations.js:4:16:4:32 | document.location |
|
|
| string-manipulations.js:4:16:4:32 | document.location |
|
|
| string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:5:16:5:32 | document.location |
|
|
| string-manipulations.js:5:16:5:32 | document.location |
|
|
| string-manipulations.js:5:16:5:37 | documen ... on.href |
|
|
| string-manipulations.js:5:16:5:47 | documen ... lueOf() |
|
|
| string-manipulations.js:5:16:5:47 | documen ... lueOf() |
|
|
| string-manipulations.js:6:16:6:32 | document.location |
|
|
| string-manipulations.js:6:16:6:32 | document.location |
|
|
| string-manipulations.js:6:16:6:37 | documen ... on.href |
|
|
| string-manipulations.js:6:16:6:43 | documen ... f.sup() |
|
|
| string-manipulations.js:6:16:6:43 | documen ... f.sup() |
|
|
| string-manipulations.js:7:16:7:32 | document.location |
|
|
| string-manipulations.js:7:16:7:32 | document.location |
|
|
| string-manipulations.js:7:16:7:37 | documen ... on.href |
|
|
| string-manipulations.js:7:16:7:51 | documen ... rCase() |
|
|
| string-manipulations.js:7:16:7:51 | documen ... rCase() |
|
|
| string-manipulations.js:8:16:8:32 | document.location |
|
|
| string-manipulations.js:8:16:8:32 | document.location |
|
|
| string-manipulations.js:8:16:8:37 | documen ... on.href |
|
|
| string-manipulations.js:8:16:8:48 | documen ... mLeft() |
|
|
| string-manipulations.js:8:16:8:48 | documen ... mLeft() |
|
|
| string-manipulations.js:9:16:9:58 | String. ... n.href) |
|
|
| string-manipulations.js:9:16:9:58 | String. ... n.href) |
|
|
| string-manipulations.js:9:36:9:52 | document.location |
|
|
| string-manipulations.js:9:36:9:52 | document.location |
|
|
| string-manipulations.js:9:36:9:57 | documen ... on.href |
|
|
| string-manipulations.js:10:16:10:45 | String( ... n.href) |
|
|
| string-manipulations.js:10:16:10:45 | String( ... n.href) |
|
|
| string-manipulations.js:10:23:10:39 | document.location |
|
|
| string-manipulations.js:10:23:10:39 | document.location |
|
|
| string-manipulations.js:10:23:10:44 | documen ... on.href |
|
|
| translate.js:6:7:6:39 | target |
|
|
| translate.js:6:16:6:32 | document.location |
|
|
| translate.js:6:16:6:32 | document.location |
|
|
| translate.js:6:16:6:39 | documen ... .search |
|
|
| translate.js:7:42:7:47 | target |
|
|
| translate.js:7:42:7:60 | target.substring(1) |
|
|
| translate.js:9:27:9:50 | searchP ... 'term') |
|
|
| translate.js:9:27:9:50 | searchP ... 'term') |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) |
|
|
| tst3.js:2:23:2:74 | decodeU ... str(1)) |
|
|
| tst3.js:2:42:2:56 | window.location |
|
|
| tst3.js:2:42:2:56 | window.location |
|
|
| tst3.js:2:42:2:63 | window. ... .search |
|
|
| tst3.js:2:42:2:73 | window. ... bstr(1) |
|
|
| tst3.js:4:25:4:28 | data |
|
|
| tst3.js:4:25:4:32 | data.src |
|
|
| tst3.js:4:25:4:32 | data.src |
|
|
| tst3.js:5:26:5:29 | data |
|
|
| tst3.js:5:26:5:31 | data.p |
|
|
| tst3.js:5:26:5:31 | data.p |
|
|
| tst3.js:7:32:7:35 | data |
|
|
| tst3.js:7:32:7:37 | data.p |
|
|
| tst3.js:7:32:7:37 | data.p |
|
|
| tst3.js:9:37:9:40 | data |
|
|
| tst3.js:9:37:9:42 | data.p |
|
|
| tst3.js:9:37:9:42 | data.p |
|
|
| tst3.js:10:38:10:41 | data |
|
|
| tst3.js:10:38:10:43 | data.p |
|
|
| tst3.js:10:38:10:43 | data.p |
|
|
| tst.js:2:7:2:39 | target |
|
|
| tst.js:2:7:2:39 | target |
|
|
| tst.js:2:16:2:32 | document.location |
|
|
| tst.js:2:16:2:32 | document.location |
|
|
| tst.js:2:16:2:39 | documen ... .search |
|
|
| tst.js:2:16:2:39 | documen ... .search |
|
|
| tst.js:2:16:2:39 | documen ... .search |
|
|
| tst.js:5:18:5:23 | target |
|
|
| tst.js:5:18:5:23 | target |
|
|
| tst.js:8:18:8:126 | "<OPTIO ... PTION>" |
|
|
| tst.js:8:18:8:126 | "<OPTIO ... PTION>" |
|
|
| tst.js:8:37:8:53 | document.location |
|
|
| tst.js:8:37:8:53 | document.location |
|
|
| tst.js:8:37:8:58 | documen ... on.href |
|
|
| tst.js:8:37:8:114 | documen ... t=")+8) |
|
|
| tst.js:12:5:12:42 | '<div s ... 'px">' |
|
|
| tst.js:12:5:12:42 | '<div s ... 'px">' |
|
|
| tst.js:12:28:12:33 | target |
|
|
| tst.js:17:25:17:41 | document.location |
|
|
| tst.js:17:25:17:41 | document.location |
|
|
| tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:20:42:20:47 | target |
|
|
| tst.js:20:42:20:60 | target.substring(1) |
|
|
| tst.js:21:18:21:41 | searchP ... 'name') |
|
|
| tst.js:21:18:21:41 | searchP ... 'name') |
|
|
| tst.js:24:14:24:19 | target |
|
|
| tst.js:26:18:26:23 | target |
|
|
| tst.js:26:18:26:23 | target |
|
|
| tst.js:28:5:28:21 | document.location |
|
|
| tst.js:28:5:28:21 | document.location |
|
|
| tst.js:28:5:28:28 | documen ... .search |
|
|
| tst.js:31:10:31:26 | document.location |
|
|
| tst.js:31:10:31:26 | document.location |
|
|
| tst.js:31:10:31:33 | documen ... .search |
|
|
| tst.js:34:16:34:20 | bar() |
|
|
| tst.js:34:16:34:20 | bar() |
|
|
| tst.js:40:16:40:44 | baz(doc ... search) |
|
|
| tst.js:40:16:40:44 | baz(doc ... search) |
|
|
| tst.js:40:20:40:36 | document.location |
|
|
| tst.js:40:20:40:36 | document.location |
|
|
| tst.js:40:20:40:43 | documen ... .search |
|
|
| tst.js:46:16:46:45 | wrap(do ... search) |
|
|
| tst.js:46:16:46:45 | wrap(do ... search) |
|
|
| tst.js:46:21:46:37 | document.location |
|
|
| tst.js:46:21:46:37 | document.location |
|
|
| tst.js:46:21:46:44 | documen ... .search |
|
|
| tst.js:54:16:54:45 | chop(do ... search) |
|
|
| tst.js:54:16:54:45 | chop(do ... search) |
|
|
| tst.js:54:21:54:37 | document.location |
|
|
| tst.js:54:21:54:37 | document.location |
|
|
| tst.js:54:21:54:44 | documen ... .search |
|
|
| tst.js:56:16:56:45 | chop(do ... search) |
|
|
| tst.js:56:16:56:45 | chop(do ... search) |
|
|
| tst.js:56:21:56:37 | document.location |
|
|
| tst.js:56:21:56:37 | document.location |
|
|
| tst.js:56:21:56:44 | documen ... .search |
|
|
| tst.js:58:16:58:32 | wrap(chop(bar())) |
|
|
| tst.js:58:16:58:32 | wrap(chop(bar())) |
|
|
| tst.js:58:21:58:31 | chop(bar()) |
|
|
| tst.js:58:26:58:30 | bar() |
|
|
| tst.js:60:34:60:34 | s |
|
|
| tst.js:62:18:62:18 | s |
|
|
| tst.js:62:18:62:18 | s |
|
|
| tst.js:64:25:64:41 | document.location |
|
|
| tst.js:64:25:64:41 | document.location |
|
|
| tst.js:64:25:64:48 | documen ... .search |
|
|
| tst.js:65:25:65:41 | document.location |
|
|
| tst.js:65:25:65:41 | document.location |
|
|
| tst.js:65:25:65:48 | documen ... .search |
|
|
| tst.js:68:16:68:20 | bar() |
|
|
| tst.js:68:16:68:20 | bar() |
|
|
| tst.js:70:1:70:27 | [,docum ... search] |
|
|
| tst.js:70:3:70:19 | document.location |
|
|
| tst.js:70:3:70:19 | document.location |
|
|
| tst.js:70:3:70:26 | documen ... .search |
|
|
| tst.js:70:46:70:46 | x |
|
|
| tst.js:73:20:73:20 | x |
|
|
| tst.js:73:20:73:20 | x |
|
|
| tst.js:77:49:77:65 | document.location |
|
|
| tst.js:77:49:77:65 | document.location |
|
|
| tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:81:26:81:42 | document.location |
|
|
| tst.js:81:26:81:42 | document.location |
|
|
| tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:82:25:82:41 | document.location |
|
|
| tst.js:82:25:82:41 | document.location |
|
|
| tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:84:33:84:49 | document.location |
|
|
| tst.js:84:33:84:49 | document.location |
|
|
| tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:85:32:85:48 | document.location |
|
|
| tst.js:85:32:85:48 | document.location |
|
|
| tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:90:39:90:55 | document.location |
|
|
| tst.js:90:39:90:55 | document.location |
|
|
| tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:96:30:96:46 | document.location |
|
|
| tst.js:96:30:96:46 | document.location |
|
|
| tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:102:25:102:41 | document.location |
|
|
| tst.js:102:25:102:41 | document.location |
|
|
| tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:107:7:107:44 | v |
|
|
| tst.js:107:11:107:27 | document.location |
|
|
| tst.js:107:11:107:27 | document.location |
|
|
| tst.js:107:11:107:34 | documen ... .search |
|
|
| tst.js:107:11:107:44 | documen ... bstr(1) |
|
|
| tst.js:110:18:110:18 | v |
|
|
| tst.js:110:18:110:18 | v |
|
|
| tst.js:136:18:136:18 | v |
|
|
| tst.js:136:18:136:18 | v |
|
|
| tst.js:148:29:148:43 | window.location |
|
|
| tst.js:148:29:148:43 | window.location |
|
|
| tst.js:148:29:148:50 | window. ... .search |
|
|
| tst.js:151:29:151:29 | v |
|
|
| tst.js:151:49:151:49 | v |
|
|
| tst.js:151:49:151:49 | v |
|
|
| tst.js:155:29:155:46 | xssSourceService() |
|
|
| tst.js:155:29:155:46 | xssSourceService() |
|
|
| tst.js:158:40:158:54 | window.location |
|
|
| tst.js:158:40:158:54 | window.location |
|
|
| tst.js:158:40:158:61 | window. ... .search |
|
|
| tst.js:177:9:177:41 | target |
|
|
| tst.js:177:18:177:34 | document.location |
|
|
| tst.js:177:18:177:34 | document.location |
|
|
| tst.js:177:18:177:41 | documen ... .search |
|
|
| tst.js:180:28:180:33 | target |
|
|
| tst.js:180:28:180:33 | target |
|
|
| tst.js:184:9:184:42 | tainted |
|
|
| tst.js:184:19:184:35 | document.location |
|
|
| tst.js:184:19:184:35 | document.location |
|
|
| tst.js:184:19:184:42 | documen ... .search |
|
|
| tst.js:186:31:186:37 | tainted |
|
|
| tst.js:186:31:186:37 | tainted |
|
|
| tst.js:188:42:188:48 | tainted |
|
|
| tst.js:188:42:188:48 | tainted |
|
|
| tst.js:189:33:189:39 | tainted |
|
|
| tst.js:189:33:189:39 | tainted |
|
|
| tst.js:191:54:191:60 | tainted |
|
|
| tst.js:191:54:191:60 | tainted |
|
|
| tst.js:192:45:192:51 | tainted |
|
|
| tst.js:192:45:192:51 | tainted |
|
|
| tst.js:193:49:193:55 | tainted |
|
|
| tst.js:193:49:193:55 | tainted |
|
|
| tst.js:197:9:197:42 | tainted |
|
|
| tst.js:197:19:197:35 | document.location |
|
|
| tst.js:197:19:197:35 | document.location |
|
|
| tst.js:197:19:197:42 | documen ... .search |
|
|
| tst.js:199:67:199:73 | tainted |
|
|
| tst.js:199:67:199:73 | tainted |
|
|
| tst.js:200:67:200:73 | tainted |
|
|
| tst.js:200:67:200:73 | tainted |
|
|
| tst.js:204:35:204:41 | tainted |
|
|
| tst.js:206:46:206:52 | tainted |
|
|
| tst.js:207:38:207:44 | tainted |
|
|
| tst.js:208:35:208:41 | tainted |
|
|
| tst.js:212:28:212:46 | this.state.tainted1 |
|
|
| tst.js:212:28:212:46 | this.state.tainted1 |
|
|
| tst.js:213:28:213:46 | this.state.tainted2 |
|
|
| tst.js:213:28:213:46 | this.state.tainted2 |
|
|
| tst.js:214:28:214:46 | this.state.tainted3 |
|
|
| tst.js:214:28:214:46 | this.state.tainted3 |
|
|
| tst.js:218:32:218:49 | prevState.tainted4 |
|
|
| tst.js:218:32:218:49 | prevState.tainted4 |
|
|
| tst.js:225:28:225:46 | this.props.tainted1 |
|
|
| tst.js:225:28:225:46 | this.props.tainted1 |
|
|
| tst.js:226:28:226:46 | this.props.tainted2 |
|
|
| tst.js:226:28:226:46 | this.props.tainted2 |
|
|
| tst.js:227:28:227:46 | this.props.tainted3 |
|
|
| tst.js:227:28:227:46 | this.props.tainted3 |
|
|
| tst.js:231:32:231:49 | prevProps.tainted4 |
|
|
| tst.js:231:32:231:49 | prevProps.tainted4 |
|
|
| tst.js:236:35:236:41 | tainted |
|
|
| tst.js:238:20:238:26 | tainted |
|
|
| tst.js:240:23:240:29 | tainted |
|
|
| tst.js:241:23:241:29 | tainted |
|
|
| tst.js:247:39:247:55 | props.propTainted |
|
|
| tst.js:251:60:251:82 | this.st ... Tainted |
|
|
| tst.js:251:60:251:82 | this.st ... Tainted |
|
|
| tst.js:255:23:255:29 | tainted |
|
|
| tst.js:259:7:259:17 | window.name |
|
|
| tst.js:259:7:259:17 | window.name |
|
|
| tst.js:259:7:259:17 | window.name |
|
|
| tst.js:260:7:260:10 | name |
|
|
| tst.js:260:7:260:10 | name |
|
|
| tst.js:260:7:260:10 | name |
|
|
| tst.js:264:11:264:21 | window.name |
|
|
| tst.js:264:11:264:21 | window.name |
|
|
| tst.js:264:11:264:21 | window.name |
|
|
| tst.js:280:22:280:29 | location |
|
|
| tst.js:280:22:280:29 | location |
|
|
| tst.js:280:22:280:29 | location |
|
|
| tst.js:285:9:285:29 | tainted |
|
|
| tst.js:285:19:285:29 | window.name |
|
|
| tst.js:285:19:285:29 | window.name |
|
|
| tst.js:288:59:288:65 | tainted |
|
|
| tst.js:288:59:288:65 | tainted |
|
|
| tst.js:301:9:301:16 | location |
|
|
| tst.js:301:9:301:16 | location |
|
|
| tst.js:302:10:302:10 | e |
|
|
| tst.js:303:20:303:20 | e |
|
|
| tst.js:303:20:303:20 | e |
|
|
| tst.js:308:10:308:17 | location |
|
|
| tst.js:308:10:308:17 | location |
|
|
| tst.js:310:10:310:10 | e |
|
|
| tst.js:311:20:311:20 | e |
|
|
| tst.js:311:20:311:20 | e |
|
|
| tst.js:316:35:316:42 | location |
|
|
| tst.js:316:35:316:42 | location |
|
|
| tst.js:316:35:316:42 | location |
|
|
| tst.js:327:18:327:34 | document.location |
|
|
| tst.js:327:18:327:34 | document.location |
|
|
| tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:341:20:341:36 | document.location |
|
|
| tst.js:341:20:341:36 | document.location |
|
|
| tst.js:343:5:343:17 | getUrl().hash |
|
|
| tst.js:343:5:343:30 | getUrl( ... ring(1) |
|
|
| tst.js:343:5:343:30 | getUrl( ... ring(1) |
|
|
| tst.js:348:7:348:39 | target |
|
|
| tst.js:348:16:348:32 | document.location |
|
|
| tst.js:348:16:348:32 | document.location |
|
|
| tst.js:348:16:348:39 | documen ... .search |
|
|
| tst.js:349:12:349:17 | target |
|
|
| tst.js:349:12:349:17 | target |
|
|
| tst.js:355:10:355:42 | target |
|
|
| tst.js:355:19:355:35 | document.location |
|
|
| tst.js:355:19:355:35 | document.location |
|
|
| tst.js:355:19:355:42 | documen ... .search |
|
|
| tst.js:356:16:356:21 | target |
|
|
| tst.js:356:16:356:21 | target |
|
|
| tst.js:360:21:360:26 | target |
|
|
| tst.js:360:21:360:26 | target |
|
|
| tst.js:363:18:363:23 | target |
|
|
| tst.js:363:18:363:23 | target |
|
|
| tst.js:371:7:371:39 | target |
|
|
| tst.js:371:16:371:32 | document.location |
|
|
| tst.js:371:16:371:32 | document.location |
|
|
| tst.js:371:16:371:39 | documen ... .search |
|
|
| tst.js:374:18:374:23 | target |
|
|
| tst.js:374:18:374:23 | target |
|
|
| tst.js:381:7:381:39 | target |
|
|
| tst.js:381:16:381:32 | document.location |
|
|
| tst.js:381:16:381:32 | document.location |
|
|
| tst.js:381:16:381:39 | documen ... .search |
|
|
| tst.js:384:18:384:23 | target |
|
|
| tst.js:384:18:384:23 | target |
|
|
| tst.js:386:18:386:23 | target |
|
|
| tst.js:386:18:386:29 | target.taint |
|
|
| tst.js:386:18:386:29 | target.taint |
|
|
| tst.js:391:19:391:35 | document.location |
|
|
| tst.js:391:19:391:35 | document.location |
|
|
| tst.js:391:19:391:42 | documen ... .search |
|
|
| tst.js:392:18:392:30 | target.taint3 |
|
|
| tst.js:392:18:392:30 | target.taint3 |
|
|
| tst.js:397:18:397:23 | target |
|
|
| tst.js:397:18:397:30 | target.taint5 |
|
|
| tst.js:397:18:397:30 | target.taint5 |
|
|
| tst.js:406:18:406:23 | target |
|
|
| tst.js:406:18:406:30 | target.taint7 |
|
|
| tst.js:406:18:406:30 | target.taint7 |
|
|
| tst.js:408:19:408:24 | target |
|
|
| tst.js:408:19:408:31 | target.taint8 |
|
|
| tst.js:409:18:409:30 | target.taint8 |
|
|
| tst.js:409:18:409:30 | target.taint8 |
|
|
| tst.js:416:7:416:46 | payload |
|
|
| tst.js:416:17:416:31 | window.location |
|
|
| tst.js:416:17:416:31 | window.location |
|
|
| tst.js:416:17:416:36 | window.location.hash |
|
|
| tst.js:416:17:416:46 | window. ... bstr(1) |
|
|
| tst.js:417:18:417:24 | payload |
|
|
| tst.js:417:18:417:24 | payload |
|
|
| tst.js:419:7:419:55 | match |
|
|
| tst.js:419:15:419:29 | window.location |
|
|
| tst.js:419:15:419:29 | window.location |
|
|
| tst.js:419:15:419:34 | window.location.hash |
|
|
| tst.js:419:15:419:55 | window. ... (\\w+)/) |
|
|
| tst.js:421:20:421:24 | match |
|
|
| tst.js:421:20:421:27 | match[1] |
|
|
| tst.js:421:20:421:27 | match[1] |
|
|
| tst.js:424:18:424:32 | window.location |
|
|
| tst.js:424:18:424:32 | window.location |
|
|
| tst.js:424:18:424:37 | window.location.hash |
|
|
| tst.js:424:18:424:48 | window. ... it('#') |
|
|
| tst.js:424:18:424:51 | window. ... '#')[1] |
|
|
| tst.js:424:18:424:51 | window. ... '#')[1] |
|
|
| typeahead.js:20:13:20:45 | target |
|
|
| typeahead.js:20:22:20:38 | document.location |
|
|
| typeahead.js:20:22:20:38 | document.location |
|
|
| typeahead.js:20:22:20:45 | documen ... .search |
|
|
| typeahead.js:21:12:21:17 | target |
|
|
| typeahead.js:24:30:24:32 | val |
|
|
| typeahead.js:25:18:25:20 | val |
|
|
| typeahead.js:25:18:25:20 | val |
|
|
| v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| v-html.vue:6:42:6:58 | document.location |
|
|
| v-html.vue:6:42:6:58 | document.location |
|
|
| winjs.js:2:7:2:53 | tainted |
|
|
| winjs.js:2:17:2:33 | document.location |
|
|
| winjs.js:2:17:2:33 | document.location |
|
|
| winjs.js:2:17:2:40 | documen ... .search |
|
|
| winjs.js:2:17:2:53 | documen ... ring(1) |
|
|
| winjs.js:3:43:3:49 | tainted |
|
|
| winjs.js:3:43:3:49 | tainted |
|
|
| winjs.js:4:43:4:49 | tainted |
|
|
| winjs.js:4:43:4:49 | tainted |
|
|
edges
|
|
| addEventListener.js:1:43:1:47 | event | addEventListener.js:2:20:2:24 | event |
|
|
| addEventListener.js:1:43:1:47 | event | addEventListener.js:2:20:2:24 | event |
|
|
| addEventListener.js:2:20:2:24 | event | addEventListener.js:2:20:2:29 | event.data |
|
|
| addEventListener.js:2:20:2:24 | event | addEventListener.js:2:20:2:29 | event.data |
|
|
| addEventListener.js:5:43:5:48 | data | addEventListener.js:6:20:6:23 | data |
|
|
| addEventListener.js:5:43:5:48 | data | addEventListener.js:6:20:6:23 | data |
|
|
| addEventListener.js:5:43:5:48 | {data} | addEventListener.js:5:44:5:47 | data |
|
|
| addEventListener.js:5:43:5:48 | {data} | addEventListener.js:5:44:5:47 | data |
|
|
| addEventListener.js:5:44:5:47 | data | addEventListener.js:5:43:5:48 | data |
|
|
| addEventListener.js:10:21:10:25 | event | addEventListener.js:12:24:12:28 | event |
|
|
| addEventListener.js:10:21:10:25 | event | addEventListener.js:12:24:12:28 | event |
|
|
| addEventListener.js:12:24:12:28 | event | addEventListener.js:12:24:12:33 | event.data |
|
|
| addEventListener.js:12:24:12:28 | event | addEventListener.js:12:24:12:33 | event.data |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params | angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params | angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params | angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:23:44:23:69 | this.ro ... .params | angular2-client.ts:23:44:23:73 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams | angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams | angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams | angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:24:44:24:74 | this.ro ... yParams | angular2-client.ts:24:44:24:78 | this.ro ... ams.foo |
|
|
| angular2-client.ts:25:44:25:71 | this.ro ... ragment | angular2-client.ts:25:44:25:71 | this.ro ... ragment |
|
|
| angular2-client.ts:26:44:26:82 | this.ro ... ('foo') | angular2-client.ts:26:44:26:82 | this.ro ... ('foo') |
|
|
| angular2-client.ts:27:44:27:87 | this.ro ... ('foo') | angular2-client.ts:27:44:27:87 | this.ro ... ('foo') |
|
|
| angular2-client.ts:29:46:29:59 | map.get('foo') | angular2-client.ts:29:46:29:59 | map.get('foo') |
|
|
| angular2-client.ts:32:44:32:74 | this.ro ... 1].path | angular2-client.ts:32:44:32:74 | this.ro ... 1].path |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters | angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters | angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters | angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:33:44:33:80 | this.ro ... ameters | angular2-client.ts:33:44:33:82 | this.ro ... eters.x |
|
|
| angular2-client.ts:34:44:34:91 | this.ro ... et('x') | angular2-client.ts:34:44:34:91 | this.ro ... et('x') |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
|
|
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
|
|
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
|
|
| classnames.js:7:47:7:69 | classNa ... w.name) | classnames.js:7:31:7:84 | `<span ... <span>` |
|
|
| classnames.js:7:47:7:69 | classNa ... w.name) | classnames.js:7:31:7:84 | `<span ... <span>` |
|
|
| classnames.js:7:58:7:68 | window.name | classnames.js:7:47:7:69 | classNa ... w.name) |
|
|
| classnames.js:7:58:7:68 | window.name | classnames.js:7:47:7:69 | classNa ... w.name) |
|
|
| classnames.js:8:47:8:70 | classNa ... w.name) | classnames.js:8:31:8:85 | `<span ... <span>` |
|
|
| classnames.js:8:47:8:70 | classNa ... w.name) | classnames.js:8:31:8:85 | `<span ... <span>` |
|
|
| classnames.js:8:59:8:69 | window.name | classnames.js:8:47:8:70 | classNa ... w.name) |
|
|
| classnames.js:8:59:8:69 | window.name | classnames.js:8:47:8:70 | classNa ... w.name) |
|
|
| classnames.js:9:47:9:70 | classNa ... w.name) | classnames.js:9:31:9:85 | `<span ... <span>` |
|
|
| classnames.js:9:47:9:70 | classNa ... w.name) | classnames.js:9:31:9:85 | `<span ... <span>` |
|
|
| classnames.js:9:59:9:69 | window.name | classnames.js:9:47:9:70 | classNa ... w.name) |
|
|
| classnames.js:9:59:9:69 | window.name | classnames.js:9:47:9:70 | classNa ... w.name) |
|
|
| classnames.js:10:45:10:55 | window.name | classnames.js:11:47:11:64 | unsafeStyle('foo') |
|
|
| classnames.js:10:45:10:55 | window.name | classnames.js:11:47:11:64 | unsafeStyle('foo') |
|
|
| classnames.js:11:47:11:64 | unsafeStyle('foo') | classnames.js:11:31:11:79 | `<span ... <span>` |
|
|
| classnames.js:11:47:11:64 | unsafeStyle('foo') | classnames.js:11:31:11:79 | `<span ... <span>` |
|
|
| classnames.js:13:47:13:68 | safeSty ... w.name) | classnames.js:13:31:13:83 | `<span ... <span>` |
|
|
| classnames.js:13:47:13:68 | safeSty ... w.name) | classnames.js:13:31:13:83 | `<span ... <span>` |
|
|
| classnames.js:13:57:13:67 | window.name | classnames.js:13:47:13:68 | safeSty ... w.name) |
|
|
| classnames.js:13:57:13:67 | window.name | classnames.js:13:47:13:68 | safeSty ... w.name) |
|
|
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
|
|
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
|
|
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
|
|
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
|
|
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
|
|
| jquery.js:2:7:2:40 | tainted | jquery.js:8:28:8:34 | tainted |
|
|
| jquery.js:2:17:2:33 | document.location | jquery.js:2:17:2:40 | documen ... .search |
|
|
| jquery.js:2:17:2:33 | document.location | jquery.js:2:17:2:40 | documen ... .search |
|
|
| jquery.js:2:17:2:40 | documen ... .search | jquery.js:2:7:2:40 | tainted |
|
|
| jquery.js:2:17:2:40 | documen ... .search | jquery.js:2:7:2:40 | tainted |
|
|
| jquery.js:2:17:2:40 | documen ... .search | jquery.js:2:7:2:40 | tainted |
|
|
| jquery.js:7:20:7:26 | tainted | jquery.js:7:5:7:34 | "<div i ... + "\\">" |
|
|
| jquery.js:7:20:7:26 | tainted | jquery.js:7:5:7:34 | "<div i ... + "\\">" |
|
|
| jquery.js:8:28:8:34 | tainted | jquery.js:8:18:8:34 | "XSS: " + tainted |
|
|
| jquery.js:8:28:8:34 | tainted | jquery.js:8:18:8:34 | "XSS: " + tainted |
|
|
| jquery.js:10:13:10:20 | location | jquery.js:10:13:10:31 | location.toString() |
|
|
| jquery.js:10:13:10:20 | location | jquery.js:10:13:10:31 | location.toString() |
|
|
| jquery.js:10:13:10:31 | location.toString() | jquery.js:10:5:10:40 | "<b>" + ... "</b>" |
|
|
| jquery.js:10:13:10:31 | location.toString() | jquery.js:10:5:10:40 | "<b>" + ... "</b>" |
|
|
| jquery.js:14:38:14:52 | window.location | jquery.js:14:38:14:57 | window.location.hash |
|
|
| jquery.js:14:38:14:52 | window.location | jquery.js:14:38:14:57 | window.location.hash |
|
|
| jquery.js:14:38:14:57 | window.location.hash | jquery.js:14:19:14:58 | decodeU ... n.hash) |
|
|
| jquery.js:14:38:14:57 | window.location.hash | jquery.js:14:19:14:58 | decodeU ... n.hash) |
|
|
| jquery.js:15:38:15:52 | window.location | jquery.js:15:38:15:59 | window. ... .search |
|
|
| jquery.js:15:38:15:52 | window.location | jquery.js:15:38:15:59 | window. ... .search |
|
|
| jquery.js:15:38:15:59 | window. ... .search | jquery.js:15:19:15:60 | decodeU ... search) |
|
|
| jquery.js:15:38:15:59 | window. ... .search | jquery.js:15:19:15:60 | decodeU ... search) |
|
|
| jquery.js:16:38:16:52 | window.location | jquery.js:16:38:16:63 | window. ... tring() |
|
|
| jquery.js:16:38:16:52 | window.location | jquery.js:16:38:16:63 | window. ... tring() |
|
|
| jquery.js:16:38:16:63 | window. ... tring() | jquery.js:16:19:16:64 | decodeU ... ring()) |
|
|
| jquery.js:16:38:16:63 | window. ... tring() | jquery.js:16:19:16:64 | decodeU ... ring()) |
|
|
| nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` |
|
|
| optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:6:18:6:23 | target |
|
|
| optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:6:18:6:23 | target |
|
|
| optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:8:17:8:22 | target |
|
|
| optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:15:9:15:14 | target |
|
|
| optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:2:16:2:39 | documen ... .search |
|
|
| optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:2:16:2:39 | documen ... .search |
|
|
| optionalSanitizer.js:2:16:2:39 | documen ... .search | optionalSanitizer.js:2:7:2:39 | target |
|
|
| optionalSanitizer.js:8:7:8:22 | tainted | optionalSanitizer.js:9:18:9:24 | tainted |
|
|
| optionalSanitizer.js:8:7:8:22 | tainted | optionalSanitizer.js:9:18:9:24 | tainted |
|
|
| optionalSanitizer.js:8:17:8:22 | target | optionalSanitizer.js:8:7:8:22 | tainted |
|
|
| optionalSanitizer.js:15:9:15:14 | target | optionalSanitizer.js:16:18:16:18 | x |
|
|
| optionalSanitizer.js:16:18:16:18 | x | optionalSanitizer.js:17:20:17:20 | x |
|
|
| optionalSanitizer.js:16:18:16:18 | x | optionalSanitizer.js:17:20:17:20 | x |
|
|
| optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:31:18:31:23 | target |
|
|
| optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:38:18:38:23 | target |
|
|
| optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:45:41:45:46 | target |
|
|
| optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:45:51:45:56 | target |
|
|
| optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:26:16:26:39 | documen ... .search |
|
|
| optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:26:16:26:39 | documen ... .search |
|
|
| optionalSanitizer.js:26:16:26:39 | documen ... .search | optionalSanitizer.js:26:7:26:39 | target |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:32:18:32:25 | tainted2 |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:32:18:32:25 | tainted2 |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:34:28:34:35 | tainted2 |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:31:18:31:23 | target | optionalSanitizer.js:31:7:31:23 | tainted2 |
|
|
| optionalSanitizer.js:34:5:34:36 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:34:5:34:36 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 |
|
|
| optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | optionalSanitizer.js:34:5:34:36 | tainted2 |
|
|
| optionalSanitizer.js:34:28:34:35 | tainted2 | optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:39:18:39:25 | tainted3 |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:39:18:39:25 | tainted3 |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:41:28:41:35 | tainted3 |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:38:18:38:23 | target | optionalSanitizer.js:38:7:38:23 | tainted3 |
|
|
| optionalSanitizer.js:41:5:41:36 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:41:5:41:36 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 |
|
|
| optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | optionalSanitizer.js:41:5:41:36 | tainted3 |
|
|
| optionalSanitizer.js:41:28:41:35 | tainted3 | optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) |
|
|
| optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| optionalSanitizer.js:45:41:45:46 | target | optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) |
|
|
| optionalSanitizer.js:45:51:45:56 | target | optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| optionalSanitizer.js:45:51:45:56 | target | optionalSanitizer.js:45:18:45:56 | sanitiz ... target |
|
|
| react-native.js:7:7:7:33 | tainted | react-native.js:8:18:8:24 | tainted |
|
|
| react-native.js:7:7:7:33 | tainted | react-native.js:8:18:8:24 | tainted |
|
|
| react-native.js:7:7:7:33 | tainted | react-native.js:9:27:9:33 | tainted |
|
|
| react-native.js:7:7:7:33 | tainted | react-native.js:9:27:9:33 | tainted |
|
|
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
|
|
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
|
|
| react-use-context.js:10:22:10:32 | window.name | react-use-context.js:10:22:10:32 | window.name |
|
|
| react-use-context.js:16:26:16:36 | window.name | react-use-context.js:16:26:16:36 | window.name |
|
|
| react-use-state.js:4:9:4:49 | state | react-use-state.js:5:51:5:55 | state |
|
|
| react-use-state.js:4:9:4:49 | state | react-use-state.js:5:51:5:55 | state |
|
|
| react-use-state.js:4:10:4:14 | state | react-use-state.js:4:9:4:49 | state |
|
|
| react-use-state.js:4:38:4:48 | window.name | react-use-state.js:4:10:4:14 | state |
|
|
| react-use-state.js:4:38:4:48 | window.name | react-use-state.js:4:10:4:14 | state |
|
|
| react-use-state.js:9:9:9:43 | state | react-use-state.js:11:51:11:55 | state |
|
|
| react-use-state.js:9:9:9:43 | state | react-use-state.js:11:51:11:55 | state |
|
|
| react-use-state.js:9:10:9:14 | state | react-use-state.js:9:9:9:43 | state |
|
|
| react-use-state.js:10:14:10:24 | window.name | react-use-state.js:9:10:9:14 | state |
|
|
| react-use-state.js:10:14:10:24 | window.name | react-use-state.js:9:10:9:14 | state |
|
|
| react-use-state.js:15:9:15:43 | state | react-use-state.js:17:51:17:55 | state |
|
|
| react-use-state.js:15:9:15:43 | state | react-use-state.js:17:51:17:55 | state |
|
|
| react-use-state.js:15:10:15:14 | state | react-use-state.js:15:9:15:43 | state |
|
|
| react-use-state.js:16:20:16:30 | window.name | react-use-state.js:15:10:15:14 | state |
|
|
| react-use-state.js:16:20:16:30 | window.name | react-use-state.js:15:10:15:14 | state |
|
|
| react-use-state.js:21:10:21:14 | state | react-use-state.js:22:14:22:17 | prev |
|
|
| react-use-state.js:22:14:22:17 | prev | react-use-state.js:23:35:23:38 | prev |
|
|
| react-use-state.js:22:14:22:17 | prev | react-use-state.js:23:35:23:38 | prev |
|
|
| react-use-state.js:25:20:25:30 | window.name | react-use-state.js:21:10:21:14 | state |
|
|
| react-use-state.js:25:20:25:30 | window.name | react-use-state.js:21:10:21:14 | state |
|
|
| sanitiser.js:16:7:16:27 | tainted | sanitiser.js:23:29:23:35 | tainted |
|
|
| sanitiser.js:16:7:16:27 | tainted | sanitiser.js:30:29:30:35 | tainted |
|
|
| sanitiser.js:16:7:16:27 | tainted | sanitiser.js:33:29:33:35 | tainted |
|
|
| sanitiser.js:16:7:16:27 | tainted | sanitiser.js:38:29:38:35 | tainted |
|
|
| sanitiser.js:16:7:16:27 | tainted | sanitiser.js:45:29:45:35 | tainted |
|
|
| sanitiser.js:16:17:16:27 | window.name | sanitiser.js:16:7:16:27 | tainted |
|
|
| sanitiser.js:16:17:16:27 | window.name | sanitiser.js:16:7:16:27 | tainted |
|
|
| sanitiser.js:23:29:23:35 | tainted | sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:23:29:23:35 | tainted | sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:30:29:30:35 | tainted | sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:30:29:30:35 | tainted | sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:33:29:33:35 | tainted | sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:33:29:33:35 | tainted | sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:38:29:38:35 | tainted | sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:38:29:38:35 | tainted | sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:45:29:45:35 | tainted | sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' |
|
|
| sanitiser.js:45:29:45:35 | tainted | sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' |
|
|
| stored-xss.js:2:39:2:55 | document.location | stored-xss.js:2:39:2:62 | documen ... .search |
|
|
| stored-xss.js:2:39:2:55 | document.location | stored-xss.js:2:39:2:62 | documen ... .search |
|
|
| stored-xss.js:2:39:2:62 | documen ... .search | stored-xss.js:5:20:5:52 | session ... ssion') |
|
|
| stored-xss.js:2:39:2:62 | documen ... .search | stored-xss.js:5:20:5:52 | session ... ssion') |
|
|
| stored-xss.js:3:35:3:51 | document.location | stored-xss.js:3:35:3:58 | documen ... .search |
|
|
| stored-xss.js:3:35:3:51 | document.location | stored-xss.js:3:35:3:58 | documen ... .search |
|
|
| stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:8:20:8:48 | localSt ... local') |
|
|
| stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:8:20:8:48 | localSt ... local') |
|
|
| stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:10:16:10:44 | localSt ... local') |
|
|
| stored-xss.js:10:9:10:44 | href | stored-xss.js:12:35:12:38 | href |
|
|
| stored-xss.js:10:16:10:44 | localSt ... local') | stored-xss.js:10:9:10:44 | href |
|
|
| stored-xss.js:12:35:12:38 | href | stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" |
|
|
| stored-xss.js:12:35:12:38 | href | stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" |
|
|
| string-manipulations.js:3:16:3:32 | document.location | string-manipulations.js:3:16:3:32 | document.location |
|
|
| string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href |
|
|
| string-manipulations.js:5:16:5:32 | document.location | string-manipulations.js:5:16:5:37 | documen ... on.href |
|
|
| string-manipulations.js:5:16:5:32 | document.location | string-manipulations.js:5:16:5:37 | documen ... on.href |
|
|
| string-manipulations.js:5:16:5:37 | documen ... on.href | string-manipulations.js:5:16:5:47 | documen ... lueOf() |
|
|
| string-manipulations.js:5:16:5:37 | documen ... on.href | string-manipulations.js:5:16:5:47 | documen ... lueOf() |
|
|
| string-manipulations.js:6:16:6:32 | document.location | string-manipulations.js:6:16:6:37 | documen ... on.href |
|
|
| string-manipulations.js:6:16:6:32 | document.location | string-manipulations.js:6:16:6:37 | documen ... on.href |
|
|
| string-manipulations.js:6:16:6:37 | documen ... on.href | string-manipulations.js:6:16:6:43 | documen ... f.sup() |
|
|
| string-manipulations.js:6:16:6:37 | documen ... on.href | string-manipulations.js:6:16:6:43 | documen ... f.sup() |
|
|
| string-manipulations.js:7:16:7:32 | document.location | string-manipulations.js:7:16:7:37 | documen ... on.href |
|
|
| string-manipulations.js:7:16:7:32 | document.location | string-manipulations.js:7:16:7:37 | documen ... on.href |
|
|
| string-manipulations.js:7:16:7:37 | documen ... on.href | string-manipulations.js:7:16:7:51 | documen ... rCase() |
|
|
| string-manipulations.js:7:16:7:37 | documen ... on.href | string-manipulations.js:7:16:7:51 | documen ... rCase() |
|
|
| string-manipulations.js:8:16:8:32 | document.location | string-manipulations.js:8:16:8:37 | documen ... on.href |
|
|
| string-manipulations.js:8:16:8:32 | document.location | string-manipulations.js:8:16:8:37 | documen ... on.href |
|
|
| string-manipulations.js:8:16:8:37 | documen ... on.href | string-manipulations.js:8:16:8:48 | documen ... mLeft() |
|
|
| string-manipulations.js:8:16:8:37 | documen ... on.href | string-manipulations.js:8:16:8:48 | documen ... mLeft() |
|
|
| string-manipulations.js:9:36:9:52 | document.location | string-manipulations.js:9:36:9:57 | documen ... on.href |
|
|
| string-manipulations.js:9:36:9:52 | document.location | string-manipulations.js:9:36:9:57 | documen ... on.href |
|
|
| string-manipulations.js:9:36:9:57 | documen ... on.href | string-manipulations.js:9:16:9:58 | String. ... n.href) |
|
|
| string-manipulations.js:9:36:9:57 | documen ... on.href | string-manipulations.js:9:16:9:58 | String. ... n.href) |
|
|
| string-manipulations.js:10:23:10:39 | document.location | string-manipulations.js:10:23:10:44 | documen ... on.href |
|
|
| string-manipulations.js:10:23:10:39 | document.location | string-manipulations.js:10:23:10:44 | documen ... on.href |
|
|
| string-manipulations.js:10:23:10:44 | documen ... on.href | string-manipulations.js:10:16:10:45 | String( ... n.href) |
|
|
| string-manipulations.js:10:23:10:44 | documen ... on.href | string-manipulations.js:10:16:10:45 | String( ... n.href) |
|
|
| translate.js:6:7:6:39 | target | translate.js:7:42:7:47 | target |
|
|
| translate.js:6:16:6:32 | document.location | translate.js:6:16:6:39 | documen ... .search |
|
|
| translate.js:6:16:6:32 | document.location | translate.js:6:16:6:39 | documen ... .search |
|
|
| translate.js:6:16:6:39 | documen ... .search | translate.js:6:7:6:39 | target |
|
|
| translate.js:7:42:7:47 | target | translate.js:7:42:7:60 | target.substring(1) |
|
|
| translate.js:7:42:7:60 | target.substring(1) | translate.js:9:27:9:50 | searchP ... 'term') |
|
|
| translate.js:7:42:7:60 | target.substring(1) | translate.js:9:27:9:50 | searchP ... 'term') |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:4:25:4:28 | data |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:5:26:5:29 | data |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:7:32:7:35 | data |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:9:37:9:40 | data |
|
|
| tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:10:38:10:41 | data |
|
|
| tst3.js:2:23:2:74 | decodeU ... str(1)) | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) |
|
|
| tst3.js:2:42:2:56 | window.location | tst3.js:2:42:2:63 | window. ... .search |
|
|
| tst3.js:2:42:2:56 | window.location | tst3.js:2:42:2:63 | window. ... .search |
|
|
| tst3.js:2:42:2:63 | window. ... .search | tst3.js:2:42:2:73 | window. ... bstr(1) |
|
|
| tst3.js:2:42:2:73 | window. ... bstr(1) | tst3.js:2:23:2:74 | decodeU ... str(1)) |
|
|
| tst3.js:4:25:4:28 | data | tst3.js:4:25:4:32 | data.src |
|
|
| tst3.js:4:25:4:28 | data | tst3.js:4:25:4:32 | data.src |
|
|
| tst3.js:5:26:5:29 | data | tst3.js:5:26:5:31 | data.p |
|
|
| tst3.js:5:26:5:29 | data | tst3.js:5:26:5:31 | data.p |
|
|
| tst3.js:7:32:7:35 | data | tst3.js:7:32:7:37 | data.p |
|
|
| tst3.js:7:32:7:35 | data | tst3.js:7:32:7:37 | data.p |
|
|
| tst3.js:9:37:9:40 | data | tst3.js:9:37:9:42 | data.p |
|
|
| tst3.js:9:37:9:40 | data | tst3.js:9:37:9:42 | data.p |
|
|
| tst3.js:10:38:10:41 | data | tst3.js:10:38:10:43 | data.p |
|
|
| tst3.js:10:38:10:41 | data | tst3.js:10:38:10:43 | data.p |
|
|
| tst.js:2:7:2:39 | target | tst.js:5:18:5:23 | target |
|
|
| tst.js:2:7:2:39 | target | tst.js:5:18:5:23 | target |
|
|
| tst.js:2:7:2:39 | target | tst.js:12:28:12:33 | target |
|
|
| tst.js:2:7:2:39 | target | tst.js:20:42:20:47 | target |
|
|
| tst.js:2:16:2:32 | document.location | tst.js:2:16:2:39 | documen ... .search |
|
|
| tst.js:2:16:2:32 | document.location | tst.js:2:16:2:39 | documen ... .search |
|
|
| tst.js:2:16:2:39 | documen ... .search | tst.js:2:7:2:39 | target |
|
|
| tst.js:2:16:2:39 | documen ... .search | tst.js:2:7:2:39 | target |
|
|
| tst.js:2:16:2:39 | documen ... .search | tst.js:2:7:2:39 | target |
|
|
| tst.js:8:37:8:53 | document.location | tst.js:8:37:8:58 | documen ... on.href |
|
|
| tst.js:8:37:8:53 | document.location | tst.js:8:37:8:58 | documen ... on.href |
|
|
| tst.js:8:37:8:58 | documen ... on.href | tst.js:8:37:8:114 | documen ... t=")+8) |
|
|
| tst.js:8:37:8:114 | documen ... t=")+8) | tst.js:8:18:8:126 | "<OPTIO ... PTION>" |
|
|
| tst.js:8:37:8:114 | documen ... t=")+8) | tst.js:8:18:8:126 | "<OPTIO ... PTION>" |
|
|
| tst.js:12:28:12:33 | target | tst.js:12:5:12:42 | '<div s ... 'px">' |
|
|
| tst.js:12:28:12:33 | target | tst.js:12:5:12:42 | '<div s ... 'px">' |
|
|
| tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') |
|
|
| tst.js:20:42:20:47 | target | tst.js:20:42:20:60 | target.substring(1) |
|
|
| tst.js:20:42:20:60 | target.substring(1) | tst.js:21:18:21:41 | searchP ... 'name') |
|
|
| tst.js:20:42:20:60 | target.substring(1) | tst.js:21:18:21:41 | searchP ... 'name') |
|
|
| tst.js:24:14:24:19 | target | tst.js:26:18:26:23 | target |
|
|
| tst.js:24:14:24:19 | target | tst.js:26:18:26:23 | target |
|
|
| tst.js:28:5:28:21 | document.location | tst.js:28:5:28:28 | documen ... .search |
|
|
| tst.js:28:5:28:21 | document.location | tst.js:28:5:28:28 | documen ... .search |
|
|
| tst.js:28:5:28:28 | documen ... .search | tst.js:24:14:24:19 | target |
|
|
| tst.js:31:10:31:26 | document.location | tst.js:31:10:31:33 | documen ... .search |
|
|
| tst.js:31:10:31:26 | document.location | tst.js:31:10:31:33 | documen ... .search |
|
|
| tst.js:31:10:31:33 | documen ... .search | tst.js:34:16:34:20 | bar() |
|
|
| tst.js:31:10:31:33 | documen ... .search | tst.js:34:16:34:20 | bar() |
|
|
| tst.js:31:10:31:33 | documen ... .search | tst.js:58:26:58:30 | bar() |
|
|
| tst.js:31:10:31:33 | documen ... .search | tst.js:68:16:68:20 | bar() |
|
|
| tst.js:31:10:31:33 | documen ... .search | tst.js:68:16:68:20 | bar() |
|
|
| tst.js:40:20:40:36 | document.location | tst.js:40:20:40:43 | documen ... .search |
|
|
| tst.js:40:20:40:36 | document.location | tst.js:40:20:40:43 | documen ... .search |
|
|
| tst.js:40:20:40:43 | documen ... .search | tst.js:40:16:40:44 | baz(doc ... search) |
|
|
| tst.js:40:20:40:43 | documen ... .search | tst.js:40:16:40:44 | baz(doc ... search) |
|
|
| tst.js:46:21:46:37 | document.location | tst.js:46:21:46:44 | documen ... .search |
|
|
| tst.js:46:21:46:37 | document.location | tst.js:46:21:46:44 | documen ... .search |
|
|
| tst.js:46:21:46:44 | documen ... .search | tst.js:46:16:46:45 | wrap(do ... search) |
|
|
| tst.js:46:21:46:44 | documen ... .search | tst.js:46:16:46:45 | wrap(do ... search) |
|
|
| tst.js:54:21:54:37 | document.location | tst.js:54:21:54:44 | documen ... .search |
|
|
| tst.js:54:21:54:37 | document.location | tst.js:54:21:54:44 | documen ... .search |
|
|
| tst.js:54:21:54:44 | documen ... .search | tst.js:54:16:54:45 | chop(do ... search) |
|
|
| tst.js:54:21:54:44 | documen ... .search | tst.js:54:16:54:45 | chop(do ... search) |
|
|
| tst.js:56:21:56:37 | document.location | tst.js:56:21:56:44 | documen ... .search |
|
|
| tst.js:56:21:56:37 | document.location | tst.js:56:21:56:44 | documen ... .search |
|
|
| tst.js:56:21:56:44 | documen ... .search | tst.js:56:16:56:45 | chop(do ... search) |
|
|
| tst.js:56:21:56:44 | documen ... .search | tst.js:56:16:56:45 | chop(do ... search) |
|
|
| tst.js:58:21:58:31 | chop(bar()) | tst.js:58:16:58:32 | wrap(chop(bar())) |
|
|
| tst.js:58:21:58:31 | chop(bar()) | tst.js:58:16:58:32 | wrap(chop(bar())) |
|
|
| tst.js:58:26:58:30 | bar() | tst.js:58:21:58:31 | chop(bar()) |
|
|
| tst.js:60:34:60:34 | s | tst.js:62:18:62:18 | s |
|
|
| tst.js:60:34:60:34 | s | tst.js:62:18:62:18 | s |
|
|
| tst.js:64:25:64:41 | document.location | tst.js:64:25:64:48 | documen ... .search |
|
|
| tst.js:64:25:64:41 | document.location | tst.js:64:25:64:48 | documen ... .search |
|
|
| tst.js:64:25:64:48 | documen ... .search | tst.js:60:34:60:34 | s |
|
|
| tst.js:65:25:65:41 | document.location | tst.js:65:25:65:48 | documen ... .search |
|
|
| tst.js:65:25:65:41 | document.location | tst.js:65:25:65:48 | documen ... .search |
|
|
| tst.js:65:25:65:48 | documen ... .search | tst.js:60:34:60:34 | s |
|
|
| tst.js:70:1:70:27 | [,docum ... search] | tst.js:70:46:70:46 | x |
|
|
| tst.js:70:3:70:19 | document.location | tst.js:70:3:70:26 | documen ... .search |
|
|
| tst.js:70:3:70:19 | document.location | tst.js:70:3:70:26 | documen ... .search |
|
|
| tst.js:70:3:70:26 | documen ... .search | tst.js:70:1:70:27 | [,docum ... search] |
|
|
| tst.js:70:3:70:26 | documen ... .search | tst.js:70:46:70:46 | x |
|
|
| tst.js:70:46:70:46 | x | tst.js:73:20:73:20 | x |
|
|
| tst.js:70:46:70:46 | x | tst.js:73:20:73:20 | x |
|
|
| tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search |
|
|
| tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search |
|
|
| tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search |
|
|
| tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search |
|
|
| tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search |
|
|
| tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search |
|
|
| tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search |
|
|
| tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search |
|
|
| tst.js:107:7:107:44 | v | tst.js:110:18:110:18 | v |
|
|
| tst.js:107:7:107:44 | v | tst.js:110:18:110:18 | v |
|
|
| tst.js:107:7:107:44 | v | tst.js:136:18:136:18 | v |
|
|
| tst.js:107:7:107:44 | v | tst.js:136:18:136:18 | v |
|
|
| tst.js:107:11:107:27 | document.location | tst.js:107:11:107:34 | documen ... .search |
|
|
| tst.js:107:11:107:27 | document.location | tst.js:107:11:107:34 | documen ... .search |
|
|
| tst.js:107:11:107:34 | documen ... .search | tst.js:107:11:107:44 | documen ... bstr(1) |
|
|
| tst.js:107:11:107:44 | documen ... bstr(1) | tst.js:107:7:107:44 | v |
|
|
| tst.js:148:29:148:43 | window.location | tst.js:148:29:148:50 | window. ... .search |
|
|
| tst.js:148:29:148:43 | window.location | tst.js:148:29:148:50 | window. ... .search |
|
|
| tst.js:148:29:148:50 | window. ... .search | tst.js:151:29:151:29 | v |
|
|
| tst.js:151:29:151:29 | v | tst.js:151:49:151:49 | v |
|
|
| tst.js:151:29:151:29 | v | tst.js:151:49:151:49 | v |
|
|
| tst.js:158:40:158:54 | window.location | tst.js:158:40:158:61 | window. ... .search |
|
|
| tst.js:158:40:158:54 | window.location | tst.js:158:40:158:61 | window. ... .search |
|
|
| tst.js:158:40:158:61 | window. ... .search | tst.js:155:29:155:46 | xssSourceService() |
|
|
| tst.js:158:40:158:61 | window. ... .search | tst.js:155:29:155:46 | xssSourceService() |
|
|
| tst.js:177:9:177:41 | target | tst.js:180:28:180:33 | target |
|
|
| tst.js:177:9:177:41 | target | tst.js:180:28:180:33 | target |
|
|
| tst.js:177:18:177:34 | document.location | tst.js:177:18:177:41 | documen ... .search |
|
|
| tst.js:177:18:177:34 | document.location | tst.js:177:18:177:41 | documen ... .search |
|
|
| tst.js:177:18:177:41 | documen ... .search | tst.js:177:9:177:41 | target |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:186:31:186:37 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:186:31:186:37 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:188:42:188:48 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:188:42:188:48 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:189:33:189:39 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:189:33:189:39 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:191:54:191:60 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:191:54:191:60 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:192:45:192:51 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:192:45:192:51 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:193:49:193:55 | tainted |
|
|
| tst.js:184:9:184:42 | tainted | tst.js:193:49:193:55 | tainted |
|
|
| tst.js:184:19:184:35 | document.location | tst.js:184:19:184:42 | documen ... .search |
|
|
| tst.js:184:19:184:35 | document.location | tst.js:184:19:184:42 | documen ... .search |
|
|
| tst.js:184:19:184:42 | documen ... .search | tst.js:184:9:184:42 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:199:67:199:73 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:199:67:199:73 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:200:67:200:73 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:200:67:200:73 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:204:35:204:41 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:206:46:206:52 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:207:38:207:44 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:208:35:208:41 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:236:35:236:41 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:238:20:238:26 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:240:23:240:29 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:241:23:241:29 | tainted |
|
|
| tst.js:197:9:197:42 | tainted | tst.js:255:23:255:29 | tainted |
|
|
| tst.js:197:19:197:35 | document.location | tst.js:197:19:197:42 | documen ... .search |
|
|
| tst.js:197:19:197:35 | document.location | tst.js:197:19:197:42 | documen ... .search |
|
|
| tst.js:197:19:197:42 | documen ... .search | tst.js:197:9:197:42 | tainted |
|
|
| tst.js:204:35:204:41 | tainted | tst.js:212:28:212:46 | this.state.tainted1 |
|
|
| tst.js:204:35:204:41 | tainted | tst.js:212:28:212:46 | this.state.tainted1 |
|
|
| tst.js:206:46:206:52 | tainted | tst.js:213:28:213:46 | this.state.tainted2 |
|
|
| tst.js:206:46:206:52 | tainted | tst.js:213:28:213:46 | this.state.tainted2 |
|
|
| tst.js:207:38:207:44 | tainted | tst.js:214:28:214:46 | this.state.tainted3 |
|
|
| tst.js:207:38:207:44 | tainted | tst.js:214:28:214:46 | this.state.tainted3 |
|
|
| tst.js:208:35:208:41 | tainted | tst.js:218:32:218:49 | prevState.tainted4 |
|
|
| tst.js:208:35:208:41 | tainted | tst.js:218:32:218:49 | prevState.tainted4 |
|
|
| tst.js:236:35:236:41 | tainted | tst.js:225:28:225:46 | this.props.tainted1 |
|
|
| tst.js:236:35:236:41 | tainted | tst.js:225:28:225:46 | this.props.tainted1 |
|
|
| tst.js:238:20:238:26 | tainted | tst.js:226:28:226:46 | this.props.tainted2 |
|
|
| tst.js:238:20:238:26 | tainted | tst.js:226:28:226:46 | this.props.tainted2 |
|
|
| tst.js:240:23:240:29 | tainted | tst.js:227:28:227:46 | this.props.tainted3 |
|
|
| tst.js:240:23:240:29 | tainted | tst.js:227:28:227:46 | this.props.tainted3 |
|
|
| tst.js:241:23:241:29 | tainted | tst.js:231:32:231:49 | prevProps.tainted4 |
|
|
| tst.js:241:23:241:29 | tainted | tst.js:231:32:231:49 | prevProps.tainted4 |
|
|
| tst.js:247:39:247:55 | props.propTainted | tst.js:251:60:251:82 | this.st ... Tainted |
|
|
| tst.js:247:39:247:55 | props.propTainted | tst.js:251:60:251:82 | this.st ... Tainted |
|
|
| tst.js:255:23:255:29 | tainted | tst.js:247:39:247:55 | props.propTainted |
|
|
| tst.js:259:7:259:17 | window.name | tst.js:259:7:259:17 | window.name |
|
|
| tst.js:260:7:260:10 | name | tst.js:260:7:260:10 | name |
|
|
| tst.js:264:11:264:21 | window.name | tst.js:264:11:264:21 | window.name |
|
|
| tst.js:280:22:280:29 | location | tst.js:280:22:280:29 | location |
|
|
| tst.js:285:9:285:29 | tainted | tst.js:288:59:288:65 | tainted |
|
|
| tst.js:285:9:285:29 | tainted | tst.js:288:59:288:65 | tainted |
|
|
| tst.js:285:19:285:29 | window.name | tst.js:285:9:285:29 | tainted |
|
|
| tst.js:285:19:285:29 | window.name | tst.js:285:9:285:29 | tainted |
|
|
| tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e |
|
|
| tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e |
|
|
| tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e |
|
|
| tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e |
|
|
| tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e |
|
|
| tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e |
|
|
| tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e |
|
|
| tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e |
|
|
| tst.js:316:35:316:42 | location | tst.js:316:35:316:42 | location |
|
|
| tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') |
|
|
| tst.js:341:20:341:36 | document.location | tst.js:343:5:343:17 | getUrl().hash |
|
|
| tst.js:341:20:341:36 | document.location | tst.js:343:5:343:17 | getUrl().hash |
|
|
| tst.js:343:5:343:17 | getUrl().hash | tst.js:343:5:343:30 | getUrl( ... ring(1) |
|
|
| tst.js:343:5:343:17 | getUrl().hash | tst.js:343:5:343:30 | getUrl( ... ring(1) |
|
|
| tst.js:348:7:348:39 | target | tst.js:349:12:349:17 | target |
|
|
| tst.js:348:7:348:39 | target | tst.js:349:12:349:17 | target |
|
|
| tst.js:348:16:348:32 | document.location | tst.js:348:16:348:39 | documen ... .search |
|
|
| tst.js:348:16:348:32 | document.location | tst.js:348:16:348:39 | documen ... .search |
|
|
| tst.js:348:16:348:39 | documen ... .search | tst.js:348:7:348:39 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:356:16:356:21 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:356:16:356:21 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:360:21:360:26 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:360:21:360:26 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:363:18:363:23 | target |
|
|
| tst.js:355:10:355:42 | target | tst.js:363:18:363:23 | target |
|
|
| tst.js:355:19:355:35 | document.location | tst.js:355:19:355:42 | documen ... .search |
|
|
| tst.js:355:19:355:35 | document.location | tst.js:355:19:355:42 | documen ... .search |
|
|
| tst.js:355:19:355:42 | documen ... .search | tst.js:355:10:355:42 | target |
|
|
| tst.js:371:7:371:39 | target | tst.js:374:18:374:23 | target |
|
|
| tst.js:371:7:371:39 | target | tst.js:374:18:374:23 | target |
|
|
| tst.js:371:16:371:32 | document.location | tst.js:371:16:371:39 | documen ... .search |
|
|
| tst.js:371:16:371:32 | document.location | tst.js:371:16:371:39 | documen ... .search |
|
|
| tst.js:371:16:371:39 | documen ... .search | tst.js:371:7:371:39 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:384:18:384:23 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:384:18:384:23 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:386:18:386:23 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:397:18:397:23 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:406:18:406:23 | target |
|
|
| tst.js:381:7:381:39 | target | tst.js:408:19:408:24 | target |
|
|
| tst.js:381:16:381:32 | document.location | tst.js:381:16:381:39 | documen ... .search |
|
|
| tst.js:381:16:381:32 | document.location | tst.js:381:16:381:39 | documen ... .search |
|
|
| tst.js:381:16:381:39 | documen ... .search | tst.js:381:7:381:39 | target |
|
|
| tst.js:386:18:386:23 | target | tst.js:386:18:386:29 | target.taint |
|
|
| tst.js:386:18:386:23 | target | tst.js:386:18:386:29 | target.taint |
|
|
| tst.js:391:19:391:35 | document.location | tst.js:391:19:391:42 | documen ... .search |
|
|
| tst.js:391:19:391:35 | document.location | tst.js:391:19:391:42 | documen ... .search |
|
|
| tst.js:391:19:391:42 | documen ... .search | tst.js:392:18:392:30 | target.taint3 |
|
|
| tst.js:391:19:391:42 | documen ... .search | tst.js:392:18:392:30 | target.taint3 |
|
|
| tst.js:397:18:397:23 | target | tst.js:397:18:397:30 | target.taint5 |
|
|
| tst.js:397:18:397:23 | target | tst.js:397:18:397:30 | target.taint5 |
|
|
| tst.js:406:18:406:23 | target | tst.js:406:18:406:30 | target.taint7 |
|
|
| tst.js:406:18:406:23 | target | tst.js:406:18:406:30 | target.taint7 |
|
|
| tst.js:408:19:408:24 | target | tst.js:408:19:408:31 | target.taint8 |
|
|
| tst.js:408:19:408:31 | target.taint8 | tst.js:408:19:408:31 | target.taint8 |
|
|
| tst.js:408:19:408:31 | target.taint8 | tst.js:409:18:409:30 | target.taint8 |
|
|
| tst.js:408:19:408:31 | target.taint8 | tst.js:409:18:409:30 | target.taint8 |
|
|
| tst.js:416:7:416:46 | payload | tst.js:417:18:417:24 | payload |
|
|
| tst.js:416:7:416:46 | payload | tst.js:417:18:417:24 | payload |
|
|
| tst.js:416:17:416:31 | window.location | tst.js:416:17:416:36 | window.location.hash |
|
|
| tst.js:416:17:416:31 | window.location | tst.js:416:17:416:36 | window.location.hash |
|
|
| tst.js:416:17:416:36 | window.location.hash | tst.js:416:17:416:46 | window. ... bstr(1) |
|
|
| tst.js:416:17:416:46 | window. ... bstr(1) | tst.js:416:7:416:46 | payload |
|
|
| tst.js:419:7:419:55 | match | tst.js:421:20:421:24 | match |
|
|
| tst.js:419:15:419:29 | window.location | tst.js:419:15:419:34 | window.location.hash |
|
|
| tst.js:419:15:419:29 | window.location | tst.js:419:15:419:34 | window.location.hash |
|
|
| tst.js:419:15:419:34 | window.location.hash | tst.js:419:15:419:55 | window. ... (\\w+)/) |
|
|
| tst.js:419:15:419:55 | window. ... (\\w+)/) | tst.js:419:7:419:55 | match |
|
|
| tst.js:421:20:421:24 | match | tst.js:421:20:421:27 | match[1] |
|
|
| tst.js:421:20:421:24 | match | tst.js:421:20:421:27 | match[1] |
|
|
| tst.js:424:18:424:32 | window.location | tst.js:424:18:424:37 | window.location.hash |
|
|
| tst.js:424:18:424:32 | window.location | tst.js:424:18:424:37 | window.location.hash |
|
|
| tst.js:424:18:424:37 | window.location.hash | tst.js:424:18:424:48 | window. ... it('#') |
|
|
| tst.js:424:18:424:48 | window. ... it('#') | tst.js:424:18:424:51 | window. ... '#')[1] |
|
|
| tst.js:424:18:424:48 | window. ... it('#') | tst.js:424:18:424:51 | window. ... '#')[1] |
|
|
| typeahead.js:20:13:20:45 | target | typeahead.js:21:12:21:17 | target |
|
|
| typeahead.js:20:22:20:38 | document.location | typeahead.js:20:22:20:45 | documen ... .search |
|
|
| typeahead.js:20:22:20:38 | document.location | typeahead.js:20:22:20:45 | documen ... .search |
|
|
| typeahead.js:20:22:20:45 | documen ... .search | typeahead.js:20:13:20:45 | target |
|
|
| typeahead.js:21:12:21:17 | target | typeahead.js:24:30:24:32 | val |
|
|
| typeahead.js:24:30:24:32 | val | typeahead.js:25:18:25:20 | val |
|
|
| typeahead.js:24:30:24:32 | val | typeahead.js:25:18:25:20 | val |
|
|
| v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted |
|
|
| winjs.js:2:7:2:53 | tainted | winjs.js:3:43:3:49 | tainted |
|
|
| winjs.js:2:7:2:53 | tainted | winjs.js:3:43:3:49 | tainted |
|
|
| winjs.js:2:7:2:53 | tainted | winjs.js:4:43:4:49 | tainted |
|
|
| winjs.js:2:7:2:53 | tainted | winjs.js:4:43:4:49 | tainted |
|
|
| winjs.js:2:17:2:33 | document.location | winjs.js:2:17:2:40 | documen ... .search |
|
|
| winjs.js:2:17:2:33 | document.location | winjs.js:2:17:2:40 | documen ... .search |
|
|
| winjs.js:2:17:2:40 | documen ... .search | winjs.js:2:17:2:53 | documen ... ring(1) |
|
|
| winjs.js:2:17:2:53 | documen ... ring(1) | winjs.js:2:7:2:53 | tainted |
|
|
#select
|
|
| addEventListener.js:2:20:2:29 | event.data | addEventListener.js:1:43:1:47 | event | addEventListener.js:2:20:2:29 | event.data | Cross-site scripting vulnerability due to $@. | addEventListener.js:1:43:1:47 | event | user-provided value |
|
|
| addEventListener.js:6:20:6:23 | data | addEventListener.js:5:43:5:48 | {data} | addEventListener.js:6:20:6:23 | data | Cross-site scripting vulnerability due to $@. | addEventListener.js:5:43:5:48 | {data} | user-provided value |
|
|
| addEventListener.js:12:24:12:33 | event.data | addEventListener.js:10:21:10:25 | event | addEventListener.js:12:24:12:33 | event.data | Cross-site scripting vulnerability due to $@. | addEventListener.js:10:21:10:25 | event | user-provided value |
|
|
| angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href | angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | angular2-client.ts:21:44:21:71 | \\u0275getDOM ... ().href | Cross-site scripting vulnerability due to $@. | angular2-client.ts:21:44:21:66 | \\u0275getDOM ... ation() | user-provided value |
|
|
| angular2-client.ts:23:44:23:73 | this.ro ... ams.foo | angular2-client.ts:23:44:23:69 | this.ro ... .params | angular2-client.ts:23:44:23:73 | this.ro ... ams.foo | Cross-site scripting vulnerability due to $@. | angular2-client.ts:23:44:23:69 | this.ro ... .params | user-provided value |
|
|
| angular2-client.ts:24:44:24:78 | this.ro ... ams.foo | angular2-client.ts:24:44:24:74 | this.ro ... yParams | angular2-client.ts:24:44:24:78 | this.ro ... ams.foo | Cross-site scripting vulnerability due to $@. | angular2-client.ts:24:44:24:74 | this.ro ... yParams | user-provided value |
|
|
| angular2-client.ts:25:44:25:71 | this.ro ... ragment | angular2-client.ts:25:44:25:71 | this.ro ... ragment | angular2-client.ts:25:44:25:71 | this.ro ... ragment | Cross-site scripting vulnerability due to $@. | angular2-client.ts:25:44:25:71 | this.ro ... ragment | user-provided value |
|
|
| angular2-client.ts:26:44:26:82 | this.ro ... ('foo') | angular2-client.ts:26:44:26:82 | this.ro ... ('foo') | angular2-client.ts:26:44:26:82 | this.ro ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:26:44:26:82 | this.ro ... ('foo') | user-provided value |
|
|
| angular2-client.ts:27:44:27:87 | this.ro ... ('foo') | angular2-client.ts:27:44:27:87 | this.ro ... ('foo') | angular2-client.ts:27:44:27:87 | this.ro ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:27:44:27:87 | this.ro ... ('foo') | user-provided value |
|
|
| angular2-client.ts:29:46:29:59 | map.get('foo') | angular2-client.ts:29:46:29:59 | map.get('foo') | angular2-client.ts:29:46:29:59 | map.get('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:29:46:29:59 | map.get('foo') | user-provided value |
|
|
| angular2-client.ts:32:44:32:74 | this.ro ... 1].path | angular2-client.ts:32:44:32:74 | this.ro ... 1].path | angular2-client.ts:32:44:32:74 | this.ro ... 1].path | Cross-site scripting vulnerability due to $@. | angular2-client.ts:32:44:32:74 | this.ro ... 1].path | user-provided value |
|
|
| angular2-client.ts:33:44:33:82 | this.ro ... eters.x | angular2-client.ts:33:44:33:80 | this.ro ... ameters | angular2-client.ts:33:44:33:82 | this.ro ... eters.x | Cross-site scripting vulnerability due to $@. | angular2-client.ts:33:44:33:80 | this.ro ... ameters | user-provided value |
|
|
| angular2-client.ts:34:44:34:91 | this.ro ... et('x') | angular2-client.ts:34:44:34:91 | this.ro ... et('x') | angular2-client.ts:34:44:34:91 | this.ro ... et('x') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:34:44:34:91 | this.ro ... et('x') | user-provided value |
|
|
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x | angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x | Cross-site scripting vulnerability due to $@. | angular2-client.ts:35:44:35:89 | this.ro ... .params | user-provided value |
|
|
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | Cross-site scripting vulnerability due to $@. | angular2-client.ts:37:44:37:58 | this.router.url | user-provided value |
|
|
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | user-provided value |
|
|
| classnames.js:7:31:7:84 | `<span ... <span>` | classnames.js:7:58:7:68 | window.name | classnames.js:7:31:7:84 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:7:58:7:68 | window.name | user-provided value |
|
|
| classnames.js:8:31:8:85 | `<span ... <span>` | classnames.js:8:59:8:69 | window.name | classnames.js:8:31:8:85 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:8:59:8:69 | window.name | user-provided value |
|
|
| classnames.js:9:31:9:85 | `<span ... <span>` | classnames.js:9:59:9:69 | window.name | classnames.js:9:31:9:85 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:9:59:9:69 | window.name | user-provided value |
|
|
| classnames.js:11:31:11:79 | `<span ... <span>` | classnames.js:10:45:10:55 | window.name | classnames.js:11:31:11:79 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:10:45:10:55 | window.name | user-provided value |
|
|
| classnames.js:13:31:13:83 | `<span ... <span>` | classnames.js:13:57:13:67 | window.name | classnames.js:13:31:13:83 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:13:57:13:67 | window.name | user-provided value |
|
|
| classnames.js:15:31:15:78 | `<span ... <span>` | classnames.js:15:52:15:62 | window.name | classnames.js:15:31:15:78 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:15:52:15:62 | window.name | user-provided value |
|
|
| jquery.js:7:5:7:34 | "<div i ... + "\\">" | jquery.js:2:17:2:40 | documen ... .search | jquery.js:7:5:7:34 | "<div i ... + "\\">" | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:40 | documen ... .search | user-provided value |
|
|
| jquery.js:8:18:8:34 | "XSS: " + tainted | jquery.js:2:17:2:33 | document.location | jquery.js:8:18:8:34 | "XSS: " + tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
|
|
| jquery.js:10:5:10:40 | "<b>" + ... "</b>" | jquery.js:10:13:10:20 | location | jquery.js:10:5:10:40 | "<b>" + ... "</b>" | Cross-site scripting vulnerability due to $@. | jquery.js:10:13:10:20 | location | user-provided value |
|
|
| jquery.js:14:19:14:58 | decodeU ... n.hash) | jquery.js:14:38:14:52 | window.location | jquery.js:14:19:14:58 | decodeU ... n.hash) | Cross-site scripting vulnerability due to $@. | jquery.js:14:38:14:52 | window.location | user-provided value |
|
|
| jquery.js:15:19:15:60 | decodeU ... search) | jquery.js:15:38:15:52 | window.location | jquery.js:15:19:15:60 | decodeU ... search) | Cross-site scripting vulnerability due to $@. | jquery.js:15:38:15:52 | window.location | user-provided value |
|
|
| jquery.js:16:19:16:64 | decodeU ... ring()) | jquery.js:16:38:16:52 | window.location | jquery.js:16:19:16:64 | decodeU ... ring()) | Cross-site scripting vulnerability due to $@. | jquery.js:16:38:16:52 | window.location | user-provided value |
|
|
| nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | HTML injection vulnerability due to $@. | nodemailer.js:13:50:13:66 | req.query.message | user-provided value |
|
|
| optionalSanitizer.js:6:18:6:23 | target | optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:6:18:6:23 | target | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:2:16:2:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:9:18:9:24 | tainted | optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:9:18:9:24 | tainted | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:2:16:2:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:17:20:17:20 | x | optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:17:20:17:20 | x | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:2:16:2:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:32:18:32:25 | tainted2 | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:32:18:32:25 | tainted2 | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:26:16:26:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:36:18:36:25 | tainted2 | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:36:18:36:25 | tainted2 | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:26:16:26:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:39:18:39:25 | tainted3 | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:39:18:39:25 | tainted3 | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:26:16:26:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:43:18:43:25 | tainted3 | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:43:18:43:25 | tainted3 | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:26:16:26:32 | document.location | user-provided value |
|
|
| optionalSanitizer.js:45:18:45:56 | sanitiz ... target | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | Cross-site scripting vulnerability due to $@. | optionalSanitizer.js:26:16:26:32 | document.location | user-provided value |
|
|
| react-native.js:8:18:8:24 | tainted | react-native.js:7:17:7:33 | req.param("code") | react-native.js:8:18:8:24 | tainted | Cross-site scripting vulnerability due to $@. | react-native.js:7:17:7:33 | req.param("code") | user-provided value |
|
|
| react-native.js:9:27:9:33 | tainted | react-native.js:7:17:7:33 | req.param("code") | react-native.js:9:27:9:33 | tainted | Cross-site scripting vulnerability due to $@. | react-native.js:7:17:7:33 | req.param("code") | user-provided value |
|
|
| react-use-context.js:10:22:10:32 | window.name | react-use-context.js:10:22:10:32 | window.name | react-use-context.js:10:22:10:32 | window.name | Cross-site scripting vulnerability due to $@. | react-use-context.js:10:22:10:32 | window.name | user-provided value |
|
|
| react-use-context.js:16:26:16:36 | window.name | react-use-context.js:16:26:16:36 | window.name | react-use-context.js:16:26:16:36 | window.name | Cross-site scripting vulnerability due to $@. | react-use-context.js:16:26:16:36 | window.name | user-provided value |
|
|
| react-use-state.js:5:51:5:55 | state | react-use-state.js:4:38:4:48 | window.name | react-use-state.js:5:51:5:55 | state | Cross-site scripting vulnerability due to $@. | react-use-state.js:4:38:4:48 | window.name | user-provided value |
|
|
| react-use-state.js:11:51:11:55 | state | react-use-state.js:10:14:10:24 | window.name | react-use-state.js:11:51:11:55 | state | Cross-site scripting vulnerability due to $@. | react-use-state.js:10:14:10:24 | window.name | user-provided value |
|
|
| react-use-state.js:17:51:17:55 | state | react-use-state.js:16:20:16:30 | window.name | react-use-state.js:17:51:17:55 | state | Cross-site scripting vulnerability due to $@. | react-use-state.js:16:20:16:30 | window.name | user-provided value |
|
|
| react-use-state.js:23:35:23:38 | prev | react-use-state.js:25:20:25:30 | window.name | react-use-state.js:23:35:23:38 | prev | Cross-site scripting vulnerability due to $@. | react-use-state.js:25:20:25:30 | window.name | user-provided value |
|
|
| sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:23:21:23:44 | '<b>' + ... '</b>' | Cross-site scripting vulnerability due to $@. | sanitiser.js:16:17:16:27 | window.name | user-provided value |
|
|
| sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:30:21:30:44 | '<b>' + ... '</b>' | Cross-site scripting vulnerability due to $@. | sanitiser.js:16:17:16:27 | window.name | user-provided value |
|
|
| sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:33:21:33:44 | '<b>' + ... '</b>' | Cross-site scripting vulnerability due to $@. | sanitiser.js:16:17:16:27 | window.name | user-provided value |
|
|
| sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:38:21:38:44 | '<b>' + ... '</b>' | Cross-site scripting vulnerability due to $@. | sanitiser.js:16:17:16:27 | window.name | user-provided value |
|
|
| sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:45:21:45:44 | '<b>' + ... '</b>' | Cross-site scripting vulnerability due to $@. | sanitiser.js:16:17:16:27 | window.name | user-provided value |
|
|
| stored-xss.js:5:20:5:52 | session ... ssion') | stored-xss.js:2:39:2:55 | document.location | stored-xss.js:5:20:5:52 | session ... ssion') | Cross-site scripting vulnerability due to $@. | stored-xss.js:2:39:2:55 | document.location | user-provided value |
|
|
| stored-xss.js:8:20:8:48 | localSt ... local') | stored-xss.js:3:35:3:51 | document.location | stored-xss.js:8:20:8:48 | localSt ... local') | Cross-site scripting vulnerability due to $@. | stored-xss.js:3:35:3:51 | document.location | user-provided value |
|
|
| stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | stored-xss.js:3:35:3:51 | document.location | stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | Cross-site scripting vulnerability due to $@. | stored-xss.js:3:35:3:51 | document.location | user-provided value |
|
|
| string-manipulations.js:3:16:3:32 | document.location | string-manipulations.js:3:16:3:32 | document.location | string-manipulations.js:3:16:3:32 | document.location | Cross-site scripting vulnerability due to $@. | string-manipulations.js:3:16:3:32 | document.location | user-provided value |
|
|
| string-manipulations.js:4:16:4:37 | documen ... on.href | string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href | Cross-site scripting vulnerability due to $@. | string-manipulations.js:4:16:4:32 | document.location | user-provided value |
|
|
| string-manipulations.js:5:16:5:47 | documen ... lueOf() | string-manipulations.js:5:16:5:32 | document.location | string-manipulations.js:5:16:5:47 | documen ... lueOf() | Cross-site scripting vulnerability due to $@. | string-manipulations.js:5:16:5:32 | document.location | user-provided value |
|
|
| string-manipulations.js:6:16:6:43 | documen ... f.sup() | string-manipulations.js:6:16:6:32 | document.location | string-manipulations.js:6:16:6:43 | documen ... f.sup() | Cross-site scripting vulnerability due to $@. | string-manipulations.js:6:16:6:32 | document.location | user-provided value |
|
|
| string-manipulations.js:7:16:7:51 | documen ... rCase() | string-manipulations.js:7:16:7:32 | document.location | string-manipulations.js:7:16:7:51 | documen ... rCase() | Cross-site scripting vulnerability due to $@. | string-manipulations.js:7:16:7:32 | document.location | user-provided value |
|
|
| string-manipulations.js:8:16:8:48 | documen ... mLeft() | string-manipulations.js:8:16:8:32 | document.location | string-manipulations.js:8:16:8:48 | documen ... mLeft() | Cross-site scripting vulnerability due to $@. | string-manipulations.js:8:16:8:32 | document.location | user-provided value |
|
|
| string-manipulations.js:9:16:9:58 | String. ... n.href) | string-manipulations.js:9:36:9:52 | document.location | string-manipulations.js:9:16:9:58 | String. ... n.href) | Cross-site scripting vulnerability due to $@. | string-manipulations.js:9:36:9:52 | document.location | user-provided value |
|
|
| string-manipulations.js:10:16:10:45 | String( ... n.href) | string-manipulations.js:10:23:10:39 | document.location | string-manipulations.js:10:16:10:45 | String( ... n.href) | Cross-site scripting vulnerability due to $@. | string-manipulations.js:10:23:10:39 | document.location | user-provided value |
|
|
| translate.js:9:27:9:50 | searchP ... 'term') | translate.js:6:16:6:32 | document.location | translate.js:9:27:9:50 | searchP ... 'term') | Cross-site scripting vulnerability due to $@. | translate.js:6:16:6:32 | document.location | user-provided value |
|
|
| tst3.js:4:25:4:32 | data.src | tst3.js:2:42:2:56 | window.location | tst3.js:4:25:4:32 | data.src | Cross-site scripting vulnerability due to $@. | tst3.js:2:42:2:56 | window.location | user-provided value |
|
|
| tst3.js:5:26:5:31 | data.p | tst3.js:2:42:2:56 | window.location | tst3.js:5:26:5:31 | data.p | Cross-site scripting vulnerability due to $@. | tst3.js:2:42:2:56 | window.location | user-provided value |
|
|
| tst3.js:7:32:7:37 | data.p | tst3.js:2:42:2:56 | window.location | tst3.js:7:32:7:37 | data.p | Cross-site scripting vulnerability due to $@. | tst3.js:2:42:2:56 | window.location | user-provided value |
|
|
| tst3.js:9:37:9:42 | data.p | tst3.js:2:42:2:56 | window.location | tst3.js:9:37:9:42 | data.p | Cross-site scripting vulnerability due to $@. | tst3.js:2:42:2:56 | window.location | user-provided value |
|
|
| tst3.js:10:38:10:43 | data.p | tst3.js:2:42:2:56 | window.location | tst3.js:10:38:10:43 | data.p | Cross-site scripting vulnerability due to $@. | tst3.js:2:42:2:56 | window.location | user-provided value |
|
|
| tst.js:5:18:5:23 | target | tst.js:2:16:2:32 | document.location | tst.js:5:18:5:23 | target | Cross-site scripting vulnerability due to $@. | tst.js:2:16:2:32 | document.location | user-provided value |
|
|
| tst.js:8:18:8:126 | "<OPTIO ... PTION>" | tst.js:8:37:8:53 | document.location | tst.js:8:18:8:126 | "<OPTIO ... PTION>" | Cross-site scripting vulnerability due to $@. | tst.js:8:37:8:53 | document.location | user-provided value |
|
|
| tst.js:12:5:12:42 | '<div s ... 'px">' | tst.js:2:16:2:39 | documen ... .search | tst.js:12:5:12:42 | '<div s ... 'px">' | Cross-site scripting vulnerability due to $@. | tst.js:2:16:2:39 | documen ... .search | user-provided value |
|
|
| tst.js:18:18:18:35 | params.get('name') | tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') | Cross-site scripting vulnerability due to $@. | tst.js:17:25:17:41 | document.location | user-provided value |
|
|
| tst.js:21:18:21:41 | searchP ... 'name') | tst.js:2:16:2:32 | document.location | tst.js:21:18:21:41 | searchP ... 'name') | Cross-site scripting vulnerability due to $@. | tst.js:2:16:2:32 | document.location | user-provided value |
|
|
| tst.js:26:18:26:23 | target | tst.js:28:5:28:21 | document.location | tst.js:26:18:26:23 | target | Cross-site scripting vulnerability due to $@. | tst.js:28:5:28:21 | document.location | user-provided value |
|
|
| tst.js:34:16:34:20 | bar() | tst.js:31:10:31:26 | document.location | tst.js:34:16:34:20 | bar() | Cross-site scripting vulnerability due to $@. | tst.js:31:10:31:26 | document.location | user-provided value |
|
|
| tst.js:40:16:40:44 | baz(doc ... search) | tst.js:40:20:40:36 | document.location | tst.js:40:16:40:44 | baz(doc ... search) | Cross-site scripting vulnerability due to $@. | tst.js:40:20:40:36 | document.location | user-provided value |
|
|
| tst.js:46:16:46:45 | wrap(do ... search) | tst.js:46:21:46:37 | document.location | tst.js:46:16:46:45 | wrap(do ... search) | Cross-site scripting vulnerability due to $@. | tst.js:46:21:46:37 | document.location | user-provided value |
|
|
| tst.js:54:16:54:45 | chop(do ... search) | tst.js:54:21:54:37 | document.location | tst.js:54:16:54:45 | chop(do ... search) | Cross-site scripting vulnerability due to $@. | tst.js:54:21:54:37 | document.location | user-provided value |
|
|
| tst.js:56:16:56:45 | chop(do ... search) | tst.js:56:21:56:37 | document.location | tst.js:56:16:56:45 | chop(do ... search) | Cross-site scripting vulnerability due to $@. | tst.js:56:21:56:37 | document.location | user-provided value |
|
|
| tst.js:58:16:58:32 | wrap(chop(bar())) | tst.js:31:10:31:26 | document.location | tst.js:58:16:58:32 | wrap(chop(bar())) | Cross-site scripting vulnerability due to $@. | tst.js:31:10:31:26 | document.location | user-provided value |
|
|
| tst.js:62:18:62:18 | s | tst.js:64:25:64:41 | document.location | tst.js:62:18:62:18 | s | Cross-site scripting vulnerability due to $@. | tst.js:64:25:64:41 | document.location | user-provided value |
|
|
| tst.js:62:18:62:18 | s | tst.js:65:25:65:41 | document.location | tst.js:62:18:62:18 | s | Cross-site scripting vulnerability due to $@. | tst.js:65:25:65:41 | document.location | user-provided value |
|
|
| tst.js:68:16:68:20 | bar() | tst.js:31:10:31:26 | document.location | tst.js:68:16:68:20 | bar() | Cross-site scripting vulnerability due to $@. | tst.js:31:10:31:26 | document.location | user-provided value |
|
|
| tst.js:73:20:73:20 | x | tst.js:70:3:70:19 | document.location | tst.js:73:20:73:20 | x | Cross-site scripting vulnerability due to $@. | tst.js:70:3:70:19 | document.location | user-provided value |
|
|
| tst.js:77:49:77:72 | documen ... .search | tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:77:49:77:65 | document.location | user-provided value |
|
|
| tst.js:81:26:81:49 | documen ... .search | tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:81:26:81:42 | document.location | user-provided value |
|
|
| tst.js:82:25:82:48 | documen ... .search | tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:82:25:82:41 | document.location | user-provided value |
|
|
| tst.js:84:33:84:56 | documen ... .search | tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:84:33:84:49 | document.location | user-provided value |
|
|
| tst.js:85:32:85:55 | documen ... .search | tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:85:32:85:48 | document.location | user-provided value |
|
|
| tst.js:90:39:90:62 | documen ... .search | tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:90:39:90:55 | document.location | user-provided value |
|
|
| tst.js:96:30:96:53 | documen ... .search | tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:96:30:96:46 | document.location | user-provided value |
|
|
| tst.js:102:25:102:48 | documen ... .search | tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search | Cross-site scripting vulnerability due to $@. | tst.js:102:25:102:41 | document.location | user-provided value |
|
|
| tst.js:110:18:110:18 | v | tst.js:107:11:107:27 | document.location | tst.js:110:18:110:18 | v | Cross-site scripting vulnerability due to $@. | tst.js:107:11:107:27 | document.location | user-provided value |
|
|
| tst.js:136:18:136:18 | v | tst.js:107:11:107:27 | document.location | tst.js:136:18:136:18 | v | Cross-site scripting vulnerability due to $@. | tst.js:107:11:107:27 | document.location | user-provided value |
|
|
| tst.js:151:49:151:49 | v | tst.js:148:29:148:43 | window.location | tst.js:151:49:151:49 | v | Cross-site scripting vulnerability due to $@. | tst.js:148:29:148:43 | window.location | user-provided value |
|
|
| tst.js:155:29:155:46 | xssSourceService() | tst.js:158:40:158:54 | window.location | tst.js:155:29:155:46 | xssSourceService() | Cross-site scripting vulnerability due to $@. | tst.js:158:40:158:54 | window.location | user-provided value |
|
|
| tst.js:180:28:180:33 | target | tst.js:177:18:177:34 | document.location | tst.js:180:28:180:33 | target | Cross-site scripting vulnerability due to $@. | tst.js:177:18:177:34 | document.location | user-provided value |
|
|
| tst.js:186:31:186:37 | tainted | tst.js:184:19:184:35 | document.location | tst.js:186:31:186:37 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:188:42:188:48 | tainted | tst.js:184:19:184:35 | document.location | tst.js:188:42:188:48 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:189:33:189:39 | tainted | tst.js:184:19:184:35 | document.location | tst.js:189:33:189:39 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:191:54:191:60 | tainted | tst.js:184:19:184:35 | document.location | tst.js:191:54:191:60 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:192:45:192:51 | tainted | tst.js:184:19:184:35 | document.location | tst.js:192:45:192:51 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:193:49:193:55 | tainted | tst.js:184:19:184:35 | document.location | tst.js:193:49:193:55 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:184:19:184:35 | document.location | user-provided value |
|
|
| tst.js:199:67:199:73 | tainted | tst.js:197:19:197:35 | document.location | tst.js:199:67:199:73 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:200:67:200:73 | tainted | tst.js:197:19:197:35 | document.location | tst.js:200:67:200:73 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:212:28:212:46 | this.state.tainted1 | tst.js:197:19:197:35 | document.location | tst.js:212:28:212:46 | this.state.tainted1 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:213:28:213:46 | this.state.tainted2 | tst.js:197:19:197:35 | document.location | tst.js:213:28:213:46 | this.state.tainted2 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:214:28:214:46 | this.state.tainted3 | tst.js:197:19:197:35 | document.location | tst.js:214:28:214:46 | this.state.tainted3 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:218:32:218:49 | prevState.tainted4 | tst.js:197:19:197:35 | document.location | tst.js:218:32:218:49 | prevState.tainted4 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:225:28:225:46 | this.props.tainted1 | tst.js:197:19:197:35 | document.location | tst.js:225:28:225:46 | this.props.tainted1 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:226:28:226:46 | this.props.tainted2 | tst.js:197:19:197:35 | document.location | tst.js:226:28:226:46 | this.props.tainted2 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:227:28:227:46 | this.props.tainted3 | tst.js:197:19:197:35 | document.location | tst.js:227:28:227:46 | this.props.tainted3 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:231:32:231:49 | prevProps.tainted4 | tst.js:197:19:197:35 | document.location | tst.js:231:32:231:49 | prevProps.tainted4 | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:251:60:251:82 | this.st ... Tainted | tst.js:197:19:197:35 | document.location | tst.js:251:60:251:82 | this.st ... Tainted | Cross-site scripting vulnerability due to $@. | tst.js:197:19:197:35 | document.location | user-provided value |
|
|
| tst.js:259:7:259:17 | window.name | tst.js:259:7:259:17 | window.name | tst.js:259:7:259:17 | window.name | Cross-site scripting vulnerability due to $@. | tst.js:259:7:259:17 | window.name | user-provided value |
|
|
| tst.js:260:7:260:10 | name | tst.js:260:7:260:10 | name | tst.js:260:7:260:10 | name | Cross-site scripting vulnerability due to $@. | tst.js:260:7:260:10 | name | user-provided value |
|
|
| tst.js:264:11:264:21 | window.name | tst.js:264:11:264:21 | window.name | tst.js:264:11:264:21 | window.name | Cross-site scripting vulnerability due to $@. | tst.js:264:11:264:21 | window.name | user-provided value |
|
|
| tst.js:280:22:280:29 | location | tst.js:280:22:280:29 | location | tst.js:280:22:280:29 | location | Cross-site scripting vulnerability due to $@. | tst.js:280:22:280:29 | location | user-provided value |
|
|
| tst.js:288:59:288:65 | tainted | tst.js:285:19:285:29 | window.name | tst.js:288:59:288:65 | tainted | Cross-site scripting vulnerability due to $@. | tst.js:285:19:285:29 | window.name | user-provided value |
|
|
| tst.js:303:20:303:20 | e | tst.js:301:9:301:16 | location | tst.js:303:20:303:20 | e | Cross-site scripting vulnerability due to $@. | tst.js:301:9:301:16 | location | user-provided value |
|
|
| tst.js:311:20:311:20 | e | tst.js:308:10:308:17 | location | tst.js:311:20:311:20 | e | Cross-site scripting vulnerability due to $@. | tst.js:308:10:308:17 | location | user-provided value |
|
|
| tst.js:316:35:316:42 | location | tst.js:316:35:316:42 | location | tst.js:316:35:316:42 | location | Cross-site scripting vulnerability due to $@. | tst.js:316:35:316:42 | location | user-provided value |
|
|
| tst.js:332:18:332:35 | params.get('name') | tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') | Cross-site scripting vulnerability due to $@. | tst.js:327:18:327:34 | document.location | user-provided value |
|
|
| tst.js:343:5:343:30 | getUrl( ... ring(1) | tst.js:341:20:341:36 | document.location | tst.js:343:5:343:30 | getUrl( ... ring(1) | Cross-site scripting vulnerability due to $@. | tst.js:341:20:341:36 | document.location | user-provided value |
|
|
| tst.js:349:12:349:17 | target | tst.js:348:16:348:32 | document.location | tst.js:349:12:349:17 | target | Cross-site scripting vulnerability due to $@. | tst.js:348:16:348:32 | document.location | user-provided value |
|
|
| tst.js:356:16:356:21 | target | tst.js:355:19:355:35 | document.location | tst.js:356:16:356:21 | target | Cross-site scripting vulnerability due to $@. | tst.js:355:19:355:35 | document.location | user-provided value |
|
|
| tst.js:360:21:360:26 | target | tst.js:355:19:355:35 | document.location | tst.js:360:21:360:26 | target | Cross-site scripting vulnerability due to $@. | tst.js:355:19:355:35 | document.location | user-provided value |
|
|
| tst.js:363:18:363:23 | target | tst.js:355:19:355:35 | document.location | tst.js:363:18:363:23 | target | Cross-site scripting vulnerability due to $@. | tst.js:355:19:355:35 | document.location | user-provided value |
|
|
| tst.js:374:18:374:23 | target | tst.js:371:16:371:32 | document.location | tst.js:374:18:374:23 | target | Cross-site scripting vulnerability due to $@. | tst.js:371:16:371:32 | document.location | user-provided value |
|
|
| tst.js:384:18:384:23 | target | tst.js:381:16:381:32 | document.location | tst.js:384:18:384:23 | target | Cross-site scripting vulnerability due to $@. | tst.js:381:16:381:32 | document.location | user-provided value |
|
|
| tst.js:386:18:386:29 | target.taint | tst.js:381:16:381:32 | document.location | tst.js:386:18:386:29 | target.taint | Cross-site scripting vulnerability due to $@. | tst.js:381:16:381:32 | document.location | user-provided value |
|
|
| tst.js:392:18:392:30 | target.taint3 | tst.js:391:19:391:35 | document.location | tst.js:392:18:392:30 | target.taint3 | Cross-site scripting vulnerability due to $@. | tst.js:391:19:391:35 | document.location | user-provided value |
|
|
| tst.js:397:18:397:30 | target.taint5 | tst.js:381:16:381:32 | document.location | tst.js:397:18:397:30 | target.taint5 | Cross-site scripting vulnerability due to $@. | tst.js:381:16:381:32 | document.location | user-provided value |
|
|
| tst.js:406:18:406:30 | target.taint7 | tst.js:381:16:381:32 | document.location | tst.js:406:18:406:30 | target.taint7 | Cross-site scripting vulnerability due to $@. | tst.js:381:16:381:32 | document.location | user-provided value |
|
|
| tst.js:409:18:409:30 | target.taint8 | tst.js:381:16:381:32 | document.location | tst.js:409:18:409:30 | target.taint8 | Cross-site scripting vulnerability due to $@. | tst.js:381:16:381:32 | document.location | user-provided value |
|
|
| tst.js:417:18:417:24 | payload | tst.js:416:17:416:31 | window.location | tst.js:417:18:417:24 | payload | Cross-site scripting vulnerability due to $@. | tst.js:416:17:416:31 | window.location | user-provided value |
|
|
| tst.js:421:20:421:27 | match[1] | tst.js:419:15:419:29 | window.location | tst.js:421:20:421:27 | match[1] | Cross-site scripting vulnerability due to $@. | tst.js:419:15:419:29 | window.location | user-provided value |
|
|
| tst.js:424:18:424:51 | window. ... '#')[1] | tst.js:424:18:424:32 | window.location | tst.js:424:18:424:51 | window. ... '#')[1] | Cross-site scripting vulnerability due to $@. | tst.js:424:18:424:32 | window.location | user-provided value |
|
|
| typeahead.js:25:18:25:20 | val | typeahead.js:20:22:20:38 | document.location | typeahead.js:25:18:25:20 | val | Cross-site scripting vulnerability due to $@. | typeahead.js:20:22:20:38 | document.location | user-provided value |
|
|
| v-html.vue:2:8:2:23 | v-html=tainted | v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted | Cross-site scripting vulnerability due to $@. | v-html.vue:6:42:6:58 | document.location | user-provided value |
|
|
| winjs.js:3:43:3:49 | tainted | winjs.js:2:17:2:33 | document.location | winjs.js:3:43:3:49 | tainted | Cross-site scripting vulnerability due to $@. | winjs.js:2:17:2:33 | document.location | user-provided value |
|
|
| winjs.js:4:43:4:49 | tainted | winjs.js:2:17:2:33 | document.location | winjs.js:4:43:4:49 | tainted | Cross-site scripting vulnerability due to $@. | winjs.js:2:17:2:33 | document.location | user-provided value |
|