Code

Add JS injection detection#43

Code

Merged

hansott merged 17 commits intomainAikidoSec/zen-internals:mainfrom add-js-injectionAikidoSec/zen-internals:add-js-injectionCopy head branch name to clipboardDec 13, 2024

+634-7

Commits

Commits on Nov 11, 2024

• Add initial js injection detection (WIP)

  timokoessler

  committed
  2b2e363

• Add failing test, prepare sub statement iteration

  timokoessler

  committed
  0f28a64

Commits on Nov 22, 2024

• Build token list by visiting AST nodes

  timokoessler

  committed
  56f74b9

• Improve js detection logic, add tests

  timokoessler

  committed
  711ad59

Commits on Nov 25, 2024

• Add failing tests

  timokoessler

  committed
  0fa7216

Commits on Nov 29, 2024

• Fix js parsing in some cases, add tests

  timokoessler

  committed
  3b5dd87

• Update oxc, remove todo

  timokoessler

  committed
  b52b6ce

Commits on Dec 2, 2024

• Add ffi binding and test

  timokoessler

  committed
  d91315d

• Allow simple math operations and numeric arrays

  timokoessler

  committed
  df47893

Commits on Dec 6, 2024

• Add real CVEs to JS injection tests

  timokoessler

  committed
  9cc8a3d

Commits on Dec 9, 2024

• Add JS CVE tests

  timokoessler

  committed
  0aabea0

• Add js test with inline return

  timokoessler

  committed
  baef0da

• Use AST for checking if user input is safe

  timokoessler

  committed
  35bce02

• Add comments, remove println

  timokoessler

  committed
  4b7bf2c

Commits on Dec 13, 2024

• Add JS injection detection example to Readme

  timokoessler

  committed
  c405dbd

• Update README.md

  Show description for a90717a
  

  timokoessler

  and

  bitterpanda63

  authored
  a90717a

• Add comments

  timokoessler

  committed
  112d244