nccgroup / tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2018/june/tracy-because-tracing-user-input-through-javascript-is-for-tools/
MIT License
552 stars 68 forks source link

Highlighting Wrong Lines #133

Open jacobheath opened 4 years ago

jacobheath commented 4 years ago

The highlighting seems to be grabbing the wrong lines in some cases. Additionally, some inline DOM writes are being entirely highlighted, making it hard to read. Parse the DOM structure and only take a few parents above. Prettify that and then substring it so the formatting is correct.