Context
Currently, Sanctifier uses AST-based pattern matching. This fails if variables are passed through intermediate functions or aliased.
What to build
Implement an intra-procedural Control Flow Graph (CFG) and taint analysis pass.
- Identify "sources" (untrusted user input).
- Identify "sinks" (privileged operations).
- Trace data flow between them.
Acceptance Criteria
Context
Currently, Sanctifier uses AST-based pattern matching. This fails if variables are passed through intermediate functions or aliased.
What to build
Implement an intra-procedural Control Flow Graph (CFG) and taint analysis pass.
Acceptance Criteria
sanctifier-core.