Javascript auditing support#20

Merged

chengpeng-wang merged 24 commits into

PurCL:js-auditfrom

acezxn:js-audit-1

Nov 24, 2025

Commits on Aug 28, 2025

Commits on Aug 29, 2025

Added delete operator and call expression as source and sink in javascript NPD extraction
acezxn
committed

Commits on Sep 4, 2025

Update buggy path computation to exclude sinks of already defined function calls
acezxn
committed

Commits on Sep 5, 2025

Improved prompt and removed code duplicates in path validator input
acezxn
committed
Added known javascript builtin that could return null for NPD source detection and tested auditing against microlight.js
acezxn
committed
Updated microlight.js submodule
acezxn
committed

Commits on Sep 7, 2025

Added global variable extraction for javascript
acezxn
committed

Commits on Sep 21, 2025

Added javascript global variable NPD analysis
acezxn
committed

Commits on Sep 24, 2025

Briefly documented DFBScanAgent and slightly improved prompt for intra dataflow analysis for Javascript
acezxn
committed

Commits on Sep 29, 2025

Commits on Sep 30, 2025

Briefly refactored Javascript NPD detector
acezxn
committed

Commits on Oct 5, 2025

Fixed segmentation fault caused by accessing nonexistent child
acezxn
committed

Commits on Oct 20, 2025

Implemented extraction of relevant non-local
acezxn
committed

Commits on Oct 25, 2025

Commits on Nov 9, 2025

Added back original global variable analysis and removed language dependent components in dfbscan agent
acezxn
committed

Commits on Nov 11, 2025

Specified nullish value extraction rule for Javascript
acezxn
committed

Commits on Nov 15, 2025

Commits on Nov 18, 2025

Added nullish arguments as source type
acezxn
committed

Commits on Nov 21, 2025