Struct SinkSite 

pub struct SinkSite {
    pub sink_shape: SinkShape,
    pub callee_path: String,
    pub arg_index: u32,
    pub arg_is_non_literal: bool,
    pub arg_kind: SinkArgKind,
    pub arg_idents: Vec<String>,
    pub span_start: u32,
    pub span_end: u32,
}

A captured non-literal sink site. The visitor records EVERY call / member-assign / member-call / tagged-template / jsx-attr whose relevant argument is non-literal; it knows nothing about CWE categories. A fully-literal argument is never captured (conservative trigger).

Fields

sink_shape: SinkShape

The syntactic shape of the sink site.

callee_path: String

The flattened dotted/bare callee or member path.

arg_index: u32

The positional index of the non-literal argument.

arg_is_non_literal: bool

Whether the relevant argument is non-literal (always true when captured).

arg_kind: SinkArgKind

The finer-grained shape of the captured non-literal argument. Lets the catalogue require unsafe shapes (concat / template-with-substitution) and exclude safe ones (object literal, the parameterized form). See SinkArgKind.

arg_idents: Vec<String>

Identifier names referenced anywhere inside the captured non-literal sink argument (deduped, source order). Used by the analyze layer to back-trace the sink argument to a known untrusted source: a sink is “source-backed” when one of these names was bound from a source-shaped expression (see ModuleInfo::tainted_bindings). Intra-module, name-based, conservative; it is never a taint proof. Empty when the argument references no bare identifiers (e.g. a pure member-call result).

span_start: u32

Byte offset of the sink span start. Stored as u32 (not Span) so the struct is bitcode-encodable and can be persisted directly in the cache.

span_end: u32

Byte offset of the sink span end.

Implementations

impl SinkSite

pub fn span(&self) -> Span

Reconstruct the source span from the stored byte offsets.

Trait Implementations

impl Clone for SinkSite

fn clone(&self) -> SinkSite

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SinkSite

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'__de> Decode<'__de> for SinkSite

where '__de:,

impl<'de> Deserialize<'de> for SinkSite

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Encode for SinkSite

impl Serialize for SinkSite

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.