Question about the cross-files invocation
YichaoXu opened this issue · comments
Dear developers of JSTAP,
I notice that jstap accepts multiple JS files as inputs, so I was wondering whether the jstap is able to construct the control flow and dataflow following some functions like module.exports and requires("...") in the NodeJS.
Many thanks
Hi Yichao,
So sorry for the late reply. No, JStap does not handle multiple files so far.
When you give several files as input, they are handled separately. This is equivalent to calling JStap on each file individually.
Note: if you are interested specifically in control and data flow analysis (and not the malicious JS part), you can find a refined version of our static analysis here. This was evaluated on browser extensions :)
Hi Yichao,
So sorry for the late reply. No, JStap does not handle multiple files so far. When you give several files as input, they are handled separately. This is equivalent to calling JStap on each file individually.
Note: if you are interested specifically in control and data flow analysis (and not the malicious JS part), you can find a refined version of our static analysis here. This was evaluated on browser extensions :)
Hi Aurore54F,
Thank you a lot for your answer. That is helpful.
Many thanks