feat(taint): intra-procedural taint analysis (#2083)#2164

Merged

magyargergo merged 19 commits into

abhigyanpatwari:mainfrom

magyargergo:feat/taint-m3

Jun 12, 2026

Commits on Jun 11, 2026

feat(taint): harvest occurrence-tagged call/member sites on StatementFacts (#2083 U1)
magyargergo
committed
feat(taint): built-in TS/JS source/sink/sanitizer model + site matcher (#2083 U2)
magyargergo
committed
feat(taint): pure intra-procedural taint propagation engine (#2083 U3)
magyargergo
committed
feat(taint): thread taint caps + model version through pdg config/meta (#2083 U5)
magyargergo
committed
feat(taint): in-phase taint emit with sparse TAINTED/SANITIZES edges (#2083 U4)
magyargergo
committed
feat(mcp): explain tool for persisted taint findings (#2083 U6)
magyargergo
committed
test(taint): acceptance fixture battery, snapshots, and bench gates (#2083 U7)
magyargergo
committed
refactor(taint): share one pointKey helper across propagate + emit (#2083 review)
magyargergo
committed
fix(taint): discriminate taint state by source occurrence (#2083 review)
magyargergo
committed
fix(mcp): route dotted symbol names in explain to symbol resolution (#2083 review)
magyargergo
committed
fix(mcp): gate explain no-taint-layer note on taintModelVersion (#2083 review)
magyargergo
committed
fix(taint): sequence-expression value flows only the final operand (#2083 review)
magyargergo
committed
perf(taint): FIFO head-cursor worklist + dedup before chainHops (#2083 review)
magyargergo
committed
perf(taint): O(1) member-read dedup via composite-key set (#2083 review)
magyargergo
committed
refactor(taint): drop test-only export; source taint caps via emit.ts (#2083 review)
magyargergo
committed
test(taint): extract the shared TS CFG/taint test harness (#2083 review)
magyargergo
committed
test(mcp): harden explain limit-rejection battery (#2083 review)
magyargergo
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(taint): intra-procedural taint analysis (#2083)#2164

feat(taint): intra-procedural taint analysis (#2083)#2164
magyargergo merged 19 commits into
abhigyanpatwari:mainfrom
magyargergo:feat/taint-m3

Commits on Jun 11, 2026

feat(taint): harvest occurrence-tagged call/member sites on StatementFacts (#2083 U1)

feat(taint): built-in TS/JS source/sink/sanitizer model + site matcher (#2083 U2)

feat(taint): pure intra-procedural taint propagation engine (#2083 U3)

feat(taint): thread taint caps + model version through pdg config/meta (#2083 U5)

feat(taint): in-phase taint emit with sparse TAINTED/SANITIZES edges (#2083 U4)

feat(mcp): explain tool for persisted taint findings (#2083 U6)

test(taint): acceptance fixture battery, snapshots, and bench gates (#2083 U7)

refactor(taint): share one pointKey helper across propagate + emit (#2083 review)

fix(taint): discriminate taint state by source occurrence (#2083 review)

fix(mcp): route dotted symbol names in explain to symbol resolution (#2083 review)

fix(mcp): gate explain no-taint-layer note on taintModelVersion (#2083 review)

fix(taint): sequence-expression value flows only the final operand (#2083 review)

perf(taint): FIFO head-cursor worklist + dedup before chainHops (#2083 review)

perf(taint): O(1) member-read dedup via composite-key set (#2083 review)

refactor(taint): drop test-only export; source taint caps via emit.ts (#2083 review)

test(taint): extract the shared TS CFG/taint test harness (#2083 review)

test(mcp): harden explain limit-rejection battery (#2083 review)

Commits on Jun 12, 2026

Merge branch 'main' into feat/taint-m3

Merge remote-tracking branch 'origin/main' into feat/taint-m3