JS: Taint propagation from low-level `ArrayBuffer` to `Strings` - #19231

Merged

Napalys merged 14 commits into

github:mainfrom

Napalys:js/typed_array

Apr 11, 2025

Commits on Apr 7, 2025

Added test case for `Uint8Array` and `TypedArray.prototype.buffer`
Napalys
committed
9388226
Add TypedArrays flow summaries for `Uint8Array` and buffer property
Napalys
committed
e23ff9c
Added test cases for `TypedArray` methods
Napalys
committed
d689a55
Add flow summaries for TypedArray methods `set` and `subarray`
Napalys
committed
ff07ec8
Added test cases for `ArrayBuffer` and `SharedArrayBuffer`
Napalys
committed
0e09947
Add flow summaries and entry points for `ArrayBuffer` and `SharedArrayBuffer`
Napalys
committed
f427720
Add test cases from `TypedArrays` to strings.
Napalys
committed
f28478e
Add flow summaries and entry points for `TextDecoder`
Napalys
committed
b97c618
Added change note
Napalys
committed
873db7c

Commits on Apr 9, 2025

Addressed comments

Napalys
and
asgerf
committed
4bc3e9e
Removed taint from `ArrayBuffer` constructor as it accepts `length`
Napalys
committed
a3e4e62
Added summary flow for `StringFromCharCode`
Napalys
committed
0c52b5a

Commits on Apr 11, 2025