Skip to main content

Module cross_file

Module cross_file 

Source
Expand description

Cross-file sanitizer-aware validation tracking.

Runs after parsing, before detection. When a function is only ever called with sanitized arguments, downgrades its parameters’ ArgumentSource from tainted to Sanitized. This eliminates false positives from internal helper functions that receive already-validated input from their callers.

Structs§

CrossFileResult
Result of cross-file sanitization analysis.

Functions§

apply_cross_file_sanitization
Perform cross-file sanitizer-aware analysis on parsed files.
is_sanitizer
Check if a function name (or the method part of obj.method) is a sanitizer.