Foxhound: Optimize taint range searches

SAP / project-foxhound

A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozilla/gecko-dev). It can be used to identify insecure data flows or data privacy leaks in client-side web applications.

GNU General Public License v3.0

82 stars 16 forks source link

Foxhound: Optimize taint range searches #81

Closed tmbrbr closed 2 years ago

tmbrbr commented 2 years ago

Foxhound was taking a long time to parse large JSON objects due to making copies of taint structures during SafeCopy and iterating over all taint ranges inside the at method.

This PR tries to optimize some of those operations.

tmbrbr commented 2 years ago

Summary of changes:

Made substring a binary search through ranges rather than linear
The at method also uses binary search to find the closest index
Dedicated method for creating SafeStringTaint substrings to prevent copying the entire String