Skip to content

Releases: m10x/project-foxhound-taint-flow-extension

1.1.2 - Pinned by Default

Choose a tag to compare

@m10x m10x released this 11 Mar 14:10
c880b9c

Now, the extension will be pinned to the toolbar by default when installed.

Implemented due to Issue #2 from @leeN

1.1.1 - Collapse Raw Report by Default

Choose a tag to compare

@m10x m10x released this 11 Mar 12:45

The raw report is now collapsed by default. For most cases the raw report is superfluous and only cluttering the view.

Implemented due to Issue #1 from @leeN

1.1.0 - Improved Visual Representation, Unique Filter

Choose a tag to compare

@m10x m10x released this 10 Mar 12:49

Changes

  • Enhance highlightTaintedPart:
    • Limit context around the tainted part to 200 characters before and after.
    • Limit the tainted part itself to max. 5000 characters, shortening the middle with an ellipsis if necessary.
  • Show operations for sink and source strings (e.g. innerHTML, document.referrer) next to the respective strings in both the overview and the detail view.
  • Rework the overview so that all taint flows of a report are rendered with separate “Tainted Sink/Source” blocks (numbered flows).
  • Change the popup refresh from a full reload to an incremental refresh:
    • Existing DOM nodes are preserved to avoid breaking text selections and Firefox’s in-page search.
  • Improve filter handling:
    • Re-apply the text filter after each refresh.
    • Show X reports (Y shown) when a text filter or the Unique mode is active.
  • Implement Unique mode:
    • Add #uniqueCheckbox, a uniqueFlowsOnly flag, and a seenFlowCombinations set.
    • filterReports only keeps reports that contain at least one new combination of
      (sinkStringHtml, sinkOperation, sourceStringHtml, sourceOperation) when Unique is enabled.

1.0.1 - Show Source/Sink Operation, Better Refresh

Choose a tag to compare

@m10x m10x released this 10 Mar 09:51
990dc18
  • The 'Overview' and 'Details' views now display the operation.
  • The automatic refresh every two seconds no longer overrides the filter.

1.0.0 - Initial Release

Choose a tag to compare

@m10x m10x released this 10 Mar 09:24
init