Question about the cross-files invocation

[Yichao Xu]

Dear developers of JSTAP,

I notice that jstap accepts multiple JS files as inputs, so I was wondering whether the jstap is able to construct the control flow and dataflow following some functions like module.exports and requires("...") in the NodeJS.

Many thanks

[Aurore Fass]

Hi Yichao,

So sorry for the late reply. No, JStap does not handle multiple files so far.
When you give several files as input, they are handled separately. This is equivalent to calling JStap on each file individually.

Note: if you are interested specifically in control and data flow analysis (and not the malicious JS part), you can find a refined version of our static analysis here. This was evaluated on browser extensions :)

[Yichao Xu]

Hi Yichao,

So sorry for the late reply. No, JStap does not handle multiple files so far. When you give several files as input, they are handled separately. This is equivalent to calling JStap on each file individually.

Note: if you are interested specifically in control and data flow analysis (and not the malicious JS part), you can find a refined version of our static analysis here. This was evaluated on browser extensions :)

Hi Aurore54F,

Thank you a lot for your answer. That is helpful.

Many thanks