use css selectors to grep your JS codebase
npm install jikA JavaScript-searching chainsaw! Query by AST shape! Print arbitrary output per selected AST node!
Find potential constructed-HTML XSS vectors in your site:
``
$ jik 'call > *:first-child + binary[operator=\+] > literal:contains(>)' js/
Give it more context than just the innermost node!
`
$ jik 'call > *:first-child + binary[operator=\+] > literal:contains(>)' \
'{print($POS, parents("call"))}' js/
Find signed int conversions in your codebase!
`
$ jik 'binary[operator=\|] > literal, assign[operator=\|\=], unary[operator=\~] > unary[operator=\~]' js/
List all of the function names defined in your codebase!
`
$ jik \
'function[id] > id:first-child, :any(assign,variable) > id + function' \
'{print($POS, (is("function") ? $NODE.parent.id || $NODE.parent.left : $NODE))}' \
js/
jik
Where selector is a cssauron-falafel selector, action
is any valid javascript surrounded by {}, and is a file or directory. Directory.js
targets are recursed and every entry ending with is searched.
The help -- accessed via jik --help has an extensive description of the selector language
and available variables in actions.
npm install -g jik`
MIT