arachni 1.5 → 1.6.1

data/components/reporters/plugin_formatters/xml/autologin.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/content_types.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/cookie_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/exec.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/form_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/healthmap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/http_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/login_script.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/metrics.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/uncommon_headers.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/uniformity.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/vector_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/waf_detector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/stdout.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/txt.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/xml/schema.xsd

@@ -762,6 +762,7 @@
             <xs:enumeration value="Arachni::Element::Link::DOM"/>
             <xs:enumeration value="Arachni::Element::Cookie" />
             <xs:enumeration value="Arachni::Element::Cookie::DOM" />
+            <xs:enumeration value="Arachni::Element::NestedCookie" />
             <xs:enumeration value="Arachni::Element::Header" />
             <xs:enumeration value="Arachni::Element::LinkTemplate" />
             <xs:enumeration value="Arachni::Element::LinkTemplate::DOM"/>

data/components/reporters/xml.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -181,8 +181,8 @@ class Arachni::Reporters::XML < Arachni::Reporter::Base
             description:  %q{Exports the audit results as an XML (.xml) file.},
             content_type: 'text/xml',
             author:       'Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>',
-            version:      '0.3.6',
-            options:      [ Options.outfile( '.xml' ), Options.skip_responses ]
+            version:      '0.3.8',
+            options:      [ Options.outfile( '.xml' ) ]
         }
     end
 

data/components/reporters/yaml.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/config/write_paths.yml

@@ -13,3 +13,7 @@ framework:
     # Default directory for scan snapshots generated either by the CLI
     # or by RPC Instances.
     snapshots:
+    # Directory for temporary files -- like for excess workload that's been
+    # offloaded to disk etc..
+    # Will default to the OS temporary directory.
+    tmpdir:

data/lib/arachni/banner.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/element_locator.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/dom_monitor.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/proxy/stub.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/proxy.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/scripts/dom_monitor.js

@@ -1,5 +1,5 @@
 /*
- * Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+ * Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
  *
  * This file is part of the Arachni Framework project and is subject to
  * redistribution and commercial restrictions. Please see the Arachni Framework
@@ -23,12 +23,11 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
     // for this document.
     initialized:         false,
 
+    event_inheritance_limit: null,
+
     // Keeps track of setTimeout() calls.
     timeouts:            [],
 
-    // Keeps track of setInterval() calls.
-    intervals:           [],
-
     // Don't include these elements in the `digest` computation.
     exclude_tags_from_digest:        ['P'],
 
@@ -152,11 +151,12 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         "input" : true
     },
 
-    initialize: function () {
+    initialize: function ( event_inheritance_limit ) {
         if( _tokenDOMMonitor.initialized ) return;
 
+        _tokenDOMMonitor.event_inheritance_limit = event_inheritance_limit;
+
         _tokenDOMMonitor.track_setTimeout();
-        _tokenDOMMonitor.track_setInterval();
         _tokenDOMMonitor.track_addEventListener();
 
         _tokenDOMMonitor.initialized = true
@@ -195,6 +195,8 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         // `offset` and `batch_size`.
         var relevant_element_index = 0;
 
+        var event_inheritance_limit   = 0;
+
         for( var i = 0; i < length; i++ ) {
             var element = elements[i];
 
@@ -209,7 +211,7 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
             if( tag_name_whitelist.length > 0 && !whitelist[tag_name] ) continue;
 
             // Skip invisible elements.
-            if( element.offsetWidth <= 0 && element.offsetHeight <= 0 ) continue;
+            if( !_tokenDOMMonitor.is_visible( element ) ) continue;
 
             var e = {
                 tag_name:   tag_name,
@@ -217,11 +219,19 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
                 attributes: {}
             };
 
-            // If the current element is allowed to have inherited events
-            // merge them with its own.
-            if( _tokenDOMMonitor.is_allowed_element_with_inherited_events( e.tag_name ) ) {
+            // If we haven't reached the event bubbling depth limit and the
+            // current element is allowed to have inherited events, merge them
+            // with its own.
+            if(
+                (
+                    !_tokenDOMMonitor.event_inheritance_limit ||
+                    event_inheritance_limit < _tokenDOMMonitor.event_inheritance_limit
+                ) && _tokenDOMMonitor.is_allowed_element_with_inherited_events( e.tag_name )
+            ) {
                 e.events = e.events.concat( element._arachni_inherited_events || [] );
                 e.events = _tokenDOMMonitor.arrayUnique( e.events.concat( global_events ) );
+
+                event_inheritance_limit++;
             }
 
             var attributes  = element.attributes;
@@ -269,7 +279,7 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
                 }
 
                 grouped_events[event_name] = grouped_events[event_name] || [];
-                grouped_events[event_name].push( event_handler );
+                grouped_events[event_name].push( event_handler.toString() );
             }
             e.events = grouped_events;
 
@@ -376,17 +386,6 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         return _tokenDOMMonitor.hashCode( digest );
     },
 
-    // Override setInterval() so that we'll know to wait for it to be triggered
-    // during DOM analysis to provide sufficient coverage.
-    track_setInterval: function () {
-        var original_setInterval = window.setInterval;
-
-        window.setInterval = function() {
-            _tokenDOMMonitor.intervals.push( arguments );
-            original_setInterval.apply( this, arguments );
-        };
-    },
-
     // Override setTimeout() so that we'll know to wait for it to be triggered
     // during DOM analysis to provide sufficient coverage.
     track_setTimeout: function () {
@@ -394,7 +393,15 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
 
         window.setTimeout = function() {
             arguments[1] = parseInt( arguments[1] );
-            _tokenDOMMonitor.timeouts.push( arguments );
+
+            args = [];
+            for( i = 0; i < arguments.length; i++ ) {
+                args[i] = arguments[i];
+            }
+            args[0] = args[0].toString();
+
+            _tokenDOMMonitor.timeouts.push( args );
+
             original_setTimeout.apply( this, arguments );
         };
     },
@@ -492,7 +499,7 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         }
 
         // All is well, register the event with the element.
-        element['_arachni_events'].push( [event, handler] );
+        element['_arachni_events'].push( [event, handler.toString()] );
     },
 
     // Sets a unique enough custom ID attribute to elements that lack proper IDs.
@@ -521,6 +528,14 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         }
     },
 
+    is_visible: function( element ) {
+        return !!(
+            element.offsetWidth  ||
+            element.offsetHeight ||
+            element.getClientRects().length
+        );
+    },
+
     is_valid_event: function ( event ) {
         return Object.prototype.hasOwnProperty.call(
             _tokenDOMMonitor.valid_events,
@@ -576,5 +591,3 @@ var _tokenDOMMonitor = _tokenDOMMonitor || {
         return hash;
     }
 };
-
-_tokenDOMMonitor.initialize();

data/lib/arachni/browser/javascript/scripts/taint_tracer.js

@@ -1,5 +1,5 @@
 /*
- * Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+ * Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
  *
  * This file is part of the Arachni Framework project and is subject to
  * redistribution and commercial restrictions. Please see the Arachni Framework
@@ -70,7 +70,6 @@ var _tokenTaintTracer = _tokenTaintTracer || {
                     'decodeURI', 'escape', 'unescape'
                 ]
             ],
-            [Text.prototype, ['replaceWholeText']],
             [Document.prototype, ['createTextNode']],
             [HTMLDocument.prototype, ['write', 'writeln']],
             [Element.prototype, ['setAttribute']],
@@ -260,13 +259,15 @@ var _tokenTaintTracer = _tokenTaintTracer || {
             trace = [];
 
         depth_offset = parseInt( depth_offset ) || 3;
-        for( var i = 0; i < depth_offset - 1; i++ ) {
+        for( var i = 0; i < depth_offset - 2; i++ ) {
             if( f ) f = f.caller;
         }
 
         var error = _tokenTaintTracer.get_error_object();
         var stackArrayOffset = depth_offset;
 
+        var current_url = window.location.href;
+
         var stack_messages = error.stack.split( '\n' );
         while( stackArrayOffset <= stack_messages.length - 1 ) {
             // Skip our own functions from the trace.
@@ -276,37 +277,41 @@ var _tokenTaintTracer = _tokenTaintTracer || {
                 };
 
                 if( f ) {
-                    frame.function.source = f;
+                    frame.function.source = f.toString();
 
                     // Scripts with 'use strict' don't let us access arguments.
                     try {
                         frame.function.arguments =
                             _tokenTaintTracer.sanitize_arguments( f.arguments );
-                    } catch(e){}
+                    } catch( e ){ console.log( e ) }
                 }
 
-                var stack = stack_messages[stackArrayOffset];
+                var stack_frame = stack_messages[stackArrayOffset].split( 'at ', 2 ).pop();
 
-                var name_rest_splits;
-                if( stack.indexOf( '@' ) !== -1 ) {
-                    name_rest_splits = stack.split( '@', 2 );
-                    frame.function.name = name_rest_splits.shift();
-                } else {
-                    name_rest_splits = [stack];
+                var name_rest_splits = stack_frame.split( ' (' );
+                if( name_rest_splits.length > 1 ) {
+                    frame.function.name = name_rest_splits.shift().split( '.', 2 ).pop();
                 }
 
-                if( name_rest_splits.length > 0 ) {
-                    stack = name_rest_splits.shift();
-                    var url_line_splits = stack.split( ':' );
+                var url_line_col_splits = name_rest_splits.pop().split( ':' );
+
+                // Remove the column.
+                url_line_col_splits.pop();
+                var url_line_splits = url_line_col_splits;
+
+                frame.line = parseInt( url_line_splits.pop() );
 
-                    // Remove the column.
-                    url_line_splits.pop();
+                frame.url = url_line_splits.join( ':' ).split( ' (' ).pop();
 
-                    frame.line = parseInt( url_line_splits.pop() );
-                    frame.url = url_line_splits.join( ':' );
+                // Line numbers in the current page will be off by one after the
+                // JS env has been removed, adjust accordingly.
+                if( frame.url == current_url && frame.line > 0 ) {
+                    frame.line--;
                 }
 
-                trace.push( frame );
+                if( frame.url != '<anonymous>' ) {
+                    trace.push( frame );
+                }
             }
 
             // Scripts with 'use strict' don't let us access function callers.
@@ -429,7 +434,7 @@ var _tokenTaintTracer = _tokenTaintTracer || {
 
             _tokenTaintTracer.log_data_flow_sink( taint, {
                 function:               {
-                    source:    func,
+                    source:    func.toString(),
                     name:      func.name || function_name,
                     arguments: arguments
                 },
@@ -506,19 +511,25 @@ var _tokenTaintTracer = _tokenTaintTracer || {
         for( var name in namespace ){
             if( !namespace.hasOwnProperty( name ) ) continue;
 
-            var potentialFunction = namespace[name];
+            try {
+                var potentialFunction = namespace[name];
 
-            if( Object.prototype.toString.call(potentialFunction) !== '[object Function]' )
-                continue;
+                if (Object.prototype.toString.call(potentialFunction) !== '[object Function]')
+                    continue;
 
-            if( _tokenTaintTracer.ignore[potentialFunction.name] ) continue;
+                if (_tokenTaintTracer.ignore[potentialFunction.name]) continue;
 
-            var namespace_function_name = Object.prototype.toString.call(namespace) +
-                '-' + potentialFunction.name;
-            if( _tokenTaintTracer.traced[namespace_function_name] ) continue;
+                var namespace_function_name = Object.prototype.toString.call(namespace) +
+                    '-' + potentialFunction.name;
+                if (_tokenTaintTracer.traced[namespace_function_name]) continue;
 
-            _tokenTaintTracer.add_trace_to_function( namespace, name, _tokenTaintTracer.object_to_name(namespace) );
-            _tokenTaintTracer.traced[namespace_function_name] = true;
+                _tokenTaintTracer.add_trace_to_function(
+                    namespace, name, _tokenTaintTracer.object_to_name( namespace )
+                );
+                _tokenTaintTracer.traced[namespace_function_name] = true;
+            } catch(e) {
+                console.log( e )
+            }
         }
     },
 
@@ -543,9 +554,15 @@ var _tokenTaintTracer = _tokenTaintTracer || {
     },
 
     add_trace_to_function: function ( object, name, object_name  ){
-        // Don't trace a tracer.
-        if( _tokenTaintTracer.get_traced_function().toString() == (object[name] || '').toString() )
+        // object[name].toString() can fail for certain functions so play it
+        // safe and bail out.
+        try {
+            // Don't trace a tracer.
+            if( _tokenTaintTracer.get_traced_function().toString() == (object[name] || '').toString() )
+                return;
+        } catch (e) {
             return;
+        }
 
         var function_needle = 'function ' + name + '(';
 
@@ -556,21 +573,22 @@ var _tokenTaintTracer = _tokenTaintTracer || {
         // are unknown; framework-specified ones have been vetted.
         if(
             object == window && object[name] &&
+            (
+                // The name should be the same as the function name...
+                object[name].toString().substring( 0, function_needle.length ) !== function_needle ||
+
+                // .. and the prototype needs to not have any members.
                 (
-                    // The name should be the same as the function name...
-                    object[name].toString().substring( 0, function_needle.length ) !== function_needle ||
-
-                    // .. and the prototype needs to not have any members.
-                    (
-                        object[name].prototype &&
-                        !_tokenTaintTracer.isEmpty( object[name].prototype )
-                    )
+                    object[name].prototype &&
+                    !_tokenTaintTracer.isEmpty( object[name].prototype )
                 )
+            )
         ) return;
 
         object[name] = _tokenTaintTracer.get_traced_function(
             object[name], object_name || _tokenTaintTracer.object_to_name( object ), name
         );
+
     },
 
     install_tracers_from_list: function( list ) {

data/lib/arachni/browser/javascript/taint_tracer/frame/called_function.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/taint_tracer/frame.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/taint_tracer/sink/base.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/taint_tracer/sink/data_flow.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/taint_tracer/sink/execution_flow.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/browser/javascript/taint_tracer.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework