Releases: m10x/project-foxhound-taint-flow-extension
Releases · m10x/project-foxhound-taint-flow-extension
Release list
1.1.2 - Pinned by Default
1.1.1 - Collapse Raw Report by Default
1.1.0 - Improved Visual Representation, Unique Filter
Changes
- Enhance
highlightTaintedPart:- Limit context around the tainted part to 200 characters before and after.
- Limit the tainted part itself to max. 5000 characters, shortening the middle with an ellipsis if necessary.
- Show operations for sink and source strings (e.g.
innerHTML,document.referrer) next to the respective strings in both the overview and the detail view. - Rework the overview so that all taint flows of a report are rendered with separate “Tainted Sink/Source” blocks (numbered flows).
- Change the popup refresh from a full reload to an incremental refresh:
- Existing DOM nodes are preserved to avoid breaking text selections and Firefox’s in-page search.
- Improve filter handling:
- Re-apply the text filter after each refresh.
- Show
X reports (Y shown)when a text filter or the Unique mode is active.
- Implement Unique mode:
- Add
#uniqueCheckbox, auniqueFlowsOnlyflag, and aseenFlowCombinationsset. filterReportsonly keeps reports that contain at least one new combination of
(sinkStringHtml, sinkOperation, sourceStringHtml, sourceOperation)when Unique is enabled.
- Add
1.0.1 - Show Source/Sink Operation, Better Refresh
- The 'Overview' and 'Details' views now display the operation.
- The automatic refresh every two seconds no longer overrides the filter.