Interface TaintAnalysisThroughStage<Name, Domain>

interface TaintAnalysisThroughStage<
    Name extends string = string,
    Domain extends AnyAbstractDomain = AnyAbstractDomain,
> {
    from(
        ...fnMapping: TaintMapping<Domain>[],
    ): TaintAnalysisThroughStage<Name, Domain>;
    getPartialDefinition(): TaintAnalysisDefinition<Name, Domain>;
    on(
        category: TaintFnCategory,
        handler?: TaintConditionFunction<AnyAbstractDomain>,
    ): TaintAnalysisFromStage<Name, Domain>;
    through(
        ...fnMapping: TaintMapping<Domain>[],
    ): TaintAnalysisToStage<Name, Domain>;
}

Type Parameters

Name extends string = string
Domain extends AnyAbstractDomain = AnyAbstractDomain

Hierarchy (View Summary)

TaintAnalysisFromStage<Name, Domain>
- TaintAnalysisThroughStage
  - TaintAnalysisToStage

Index

Methods

from getPartialDefinition on through

Methods

from

from(
...fnMapping: TaintMapping<Domain>[],
): TaintAnalysisThroughStage<Name, Domain>
Add propagator or sanitizer rules that determine the resulting taint of matching calls.
Parameters
- ...fnMapping: TaintMapping<Domain>[]
Returns TaintAnalysisThroughStage<Name, Domain>
Inherited from TaintAnalysisFromStage.from
- Defined in src/taint-analysis/builder/taint-analysis-definition.ts:61

getPartialDefinition

getPartialDefinition(): TaintAnalysisDefinition<Name, Domain>
Shortcut when no transformers, sinks, and/or a report message should be defined

Returns TaintAnalysisDefinition<Name, Domain>
Inherited from TaintAnalysisFromStage.getPartialDefinition
- Defined in src/taint-analysis/builder/taint-analysis-definition.ts:65

on

on(
category: TaintFnCategory,
handler?: TaintConditionFunction<AnyAbstractDomain>,
): TaintAnalysisFromStage<Name, Domain>
Add rules for function categories (i.e. sets of functions from BuiltInIndex fulfilling certain properties)
Parameters
- category: TaintFnCategory
- Optionalhandler: TaintConditionFunction<AnyAbstractDomain>
Returns TaintAnalysisFromStage<Name, Domain>
Inherited from TaintAnalysisFromStage.on
- Defined in src/taint-analysis/builder/taint-analysis-definition.ts:63

through

through(
...fnMapping: TaintMapping<Domain>[],
): TaintAnalysisToStage<Name, Domain>
Add propagator or sanitizer rules that determine the resulting taint of matching calls.
Parameters
- ...fnMapping: TaintMapping<Domain>[]
Returns TaintAnalysisToStage<Name, Domain>
- Defined in src/taint-analysis/builder/taint-analysis-definition.ts:56