Skip to content

1.1.0 - Improved Visual Representation, Unique Filter

Choose a tag to compare

@m10x m10x released this 10 Mar 12:49

Changes

  • Enhance highlightTaintedPart:
    • Limit context around the tainted part to 200 characters before and after.
    • Limit the tainted part itself to max. 5000 characters, shortening the middle with an ellipsis if necessary.
  • Show operations for sink and source strings (e.g. innerHTML, document.referrer) next to the respective strings in both the overview and the detail view.
  • Rework the overview so that all taint flows of a report are rendered with separate “Tainted Sink/Source” blocks (numbered flows).
  • Change the popup refresh from a full reload to an incremental refresh:
    • Existing DOM nodes are preserved to avoid breaking text selections and Firefox’s in-page search.
  • Improve filter handling:
    • Re-apply the text filter after each refresh.
    • Show X reports (Y shown) when a text filter or the Unique mode is active.
  • Implement Unique mode:
    • Add #uniqueCheckbox, a uniqueFlowsOnly flag, and a seenFlowCombinations set.
    • filterReports only keeps reports that contain at least one new combination of
      (sinkStringHtml, sinkOperation, sourceStringHtml, sourceOperation) when Unique is enabled.