search

SAP / project-foxhound

A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozilla/gecko-dev). It can be used to identify insecure data flows or data privacy leaks in client-side web applications.
GNU General Public License v3.0
80 stars 15 forks source link

Inlining Tainting Checks #196

Open tmbrbr opened 10 months ago

tmbrbr commented 10 months ago

There are a lot of checks to see if strings and objects are tainted, for example:

https://github.com/SAP/project-foxhound/blob/ea28d9c679ab2d1790f64cc680bde8ef0c49fa13/taint/Taint.h#L495

and

https://github.com/SAP/project-foxhound/blob/ea28d9c679ab2d1790f64cc680bde8ef0c49fa13/js/src/vm/StringType.h#L473

Check whether inlining these (and some of the other tainting related methods) helps with performance.