You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Limit context around the tainted part to 200 characters before and after.
Limit the tainted part itself to max. 5000 characters, shortening the middle with an ellipsis if necessary.
Show operations for sink and source strings (e.g. innerHTML, document.referrer) next to the respective strings in both the overview and the detail view.
Rework the overview so that all taint flows of a report are rendered with separate “Tainted Sink/Source” blocks (numbered flows).
Change the popup refresh from a full reload to an incremental refresh:
Existing DOM nodes are preserved to avoid breaking text selections and Firefox’s in-page search.
Improve filter handling:
Re-apply the text filter after each refresh.
Show X reports (Y shown) when a text filter or the Unique mode is active.
Implement Unique mode:
Add #uniqueCheckbox, a uniqueFlowsOnly flag, and a seenFlowCombinations set.
filterReports only keeps reports that contain at least one new combination of (sinkStringHtml, sinkOperation, sourceStringHtml, sourceOperation) when Unique is enabled.