Does this tool support standard JavaScript, such as ES6/5 or basic JavaScript?

formalsec / graphjs

MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabilities.

https://formalsec.github.io/

8 stars 1 forks source link

Does this tool support standard JavaScript, such as ES6/5 or basic JavaScript? #10

Open littlejlf opened 3 months ago

filipeom commented 3 months ago

I don't understand this question. Our tool does work for standard JavaScript. Our frontend parser is esprima v4.

We have more info on the formalism in the paper if that's what you're asking.

@mafsbaptista maybe we could add the paper reference in the readme?

littlejlf commented 3 months ago

Thanks Because I saw that the examples in the paper were written in Node.js, I mistakenly thought that this tool was designed specifically for Node.js.