mozilla / scanjs

[DEPRECATED] Static analysis tool for javascript code.
Other
429 stars 38 forks source link

Add ability to add custom node filter (or maybe combine ruletypes) #124

Closed pauljt closed 3 years ago

pauljt commented 10 years ago

We need rules that are only slighty complex to reduce false positives e.g:

ringtonePlayer.mozAudioChannelType = 'alarm' navigator.setMessageHandler('connect',callback) iframe.setAttribute('mozbrowser', true);

(literals, function calls and members all aren't very useful in this case)

A couple of ways to do this:

Or maybe we need a different algorithm than just test each node, one by one.