Expand description
Cross-file sanitizer-aware validation tracking.
Runs after parsing, before detection. When a function is only ever called
with sanitized arguments, downgrades its parameters’ ArgumentSource from
tainted to Sanitized. This eliminates false positives from internal
helper functions that receive already-validated input from their callers.
Structs§
- Cross
File Result - Result of cross-file sanitization analysis.
Functions§
- apply_
cross_ file_ sanitization - Perform cross-file sanitizer-aware analysis on parsed files.
- is_
sanitizer - Check if a function name (or the method part of
obj.method) is a sanitizer.