dd-trace/packages/dd-trace/src/appsec/iast/taint-tracking/csi-methods.js

Datadog APM tracing client for JavaScript

'use strict'

const csiMethods = [
  { src: 'concat' },
  { src: 'join' },
  { src: 'parse' },
  { src: 'plusOperator', operator: true },
  { src: 'random' },
  { src: 'replace' },
  { src: 'slice' },
  { src: 'substr' },
  { src: 'substring' },
  { src: 'toLowerCase', dst: 'stringCase' },
  { src: 'toUpperCase', dst: 'stringCase' },
  { src: 'tplOperator', operator: true },
  { src: 'trim' },
  { src: 'trimEnd' },
  { src: 'trimStart', dst: 'trim' },
  { src: 'eval', allowedWithoutCallee: true },
]

module.exports = {
  csiMethods,
}