circle-ir 4.15.0 → 4.16.1

package/dist/analysis/js-crlf-strip.js

@@ -0,0 +1,244 @@
+/**
+ * Whether a JavaScript / TypeScript `String.replace` chain strips CR and LF
+ * (cognium-dev#562, the JS half of the Java rule in `java-crlf-strip.ts`).
+ *
+ * The decision is made by running the chain's own literal patterns against a
+ * short probe string, so a regex is judged by what it matches rather than by how
+ * it is spelled (`/[\r\n]/g`, `/\r|\n/g`, `/\s+/g` and `/[\x00-\x1f]/g` all
+ * strip both). Only literal arguments are understood: a pattern held in a
+ * variable, a `new RegExp(...)`, or a replacement that is a function or a
+ * non-literal makes the whole chain `undecided`, and the caller keeps the credit
+ * the class-less `replace` row gave before.
+ */
+const MAX_PATTERN_LENGTH = 200;
+/** String methods that may follow a replace in a judged chain without changing its CR / LF coverage. */
+const NEUTRAL_AFTER_REPLACE = new Set([
+    'replace', 'replaceAll', 'trim', 'trimStart', 'trimEnd', 'toString',
+    'toLowerCase', 'toUpperCase', 'slice', 'substring',
+]);
+/** Probe text: lone and doubled CR / LF, a CRLF pair and neutral characters. */
+const PROBE = 'a\r\rb\n\nc\r\nd\n\re x\t';
+function readQuoted(s, i) {
+    const q = s[i];
+    if (q !== '"' && q !== "'" && q !== '`')
+        return null;
+    let out = '';
+    for (let j = i + 1; j < s.length; j++) {
+        const c = s[j];
+        if (c === q)
+            return { value: out, end: j + 1 };
+        if (q === '`' && c === '$' && s[j + 1] === '{')
+            return null;
+        if (c === '\\') {
+            const n = s[j + 1];
+            if (n === undefined)
+                return null;
+            switch (n) {
+                case 'n':
+                    out += '\n';
+                    j++;
+                    continue;
+                case 'r':
+                    out += '\r';
+                    j++;
+                    continue;
+                case 't':
+                    out += '\t';
+                    j++;
+                    continue;
+                case '0':
+                    out += '\0';
+                    j++;
+                    continue;
+                case 'x': {
+                    const h = /^[0-9a-fA-F]{2}/.exec(s.slice(j + 2, j + 4));
+                    if (!h)
+                        return null;
+                    out += String.fromCharCode(parseInt(h[0], 16));
+                    j += 3;
+                    continue;
+                }
+                case 'u': {
+                    const h = /^[0-9a-fA-F]{4}/.exec(s.slice(j + 2, j + 6));
+                    if (!h)
+                        return null;
+                    out += String.fromCharCode(parseInt(h[0], 16));
+                    j += 5;
+                    continue;
+                }
+                default:
+                    out += n;
+                    j++;
+                    continue;
+            }
+        }
+        if (c === '\n' && q !== '`')
+            return null;
+        out += c;
+    }
+    return null;
+}
+function readRegexLiteral(s, i) {
+    if (s[i] !== '/')
+        return null;
+    let inClass = false;
+    for (let j = i + 1; j < s.length; j++) {
+        const c = s[j];
+        if (c === '\n')
+            return null;
+        if (c === '\\') {
+            j++;
+            continue;
+        }
+        if (inClass) {
+            if (c === ']')
+                inClass = false;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            continue;
+        }
+        if (c === '/') {
+            const flags = /^[dgimsuvy]*/.exec(s.slice(j + 1))[0];
+            return { source: s.slice(i + 1, j), flags, end: j + 1 + flags.length };
+        }
+    }
+    return null;
+}
+const skipWs = (s, i) => {
+    while (i < s.length && /\s/.test(s[i]))
+        i++;
+    return i;
+};
+/**
+ * Parse every `.replace(<literal>, <string literal>)` / `.replaceAll(...)` step
+ * of a chain, in source order. Returns null when any step is not literal.
+ */
+function parseSteps(chainText) {
+    const steps = [];
+    const callRe = /\.\s*(replaceAll|replace)\s*\(/g;
+    let m;
+    while ((m = callRe.exec(chainText)) !== null) {
+        const kind = m[1];
+        let i = skipWs(chainText, m.index + m[0].length);
+        let pattern;
+        const rx = readRegexLiteral(chainText, i);
+        if (rx) {
+            if (rx.source.length > MAX_PATTERN_LENGTH)
+                return null;
+            try {
+                pattern = new RegExp(rx.source, rx.flags);
+            }
+            catch {
+                return null;
+            }
+            i = rx.end;
+        }
+        else {
+            const str = readQuoted(chainText, i);
+            if (!str)
+                return null;
+            pattern = str.value;
+            i = str.end;
+        }
+        i = skipWs(chainText, i);
+        if (chainText[i] !== ',')
+            return null;
+        i = skipWs(chainText, i + 1);
+        const rep = readQuoted(chainText, i);
+        if (!rep)
+            return null;
+        i = skipWs(chainText, rep.end);
+        if (chainText[i] !== ')')
+            return null;
+        steps.push({ kind, pattern, replacement: rep.value });
+        callRe.lastIndex = i + 1;
+    }
+    return steps;
+}
+function run(steps, input) {
+    let s = input;
+    try {
+        for (const st of steps) {
+            if (st.kind === 'replaceAll' && st.pattern instanceof RegExp && !st.pattern.global)
+                return null;
+            s = st.kind === 'replaceAll'
+                ? s.replaceAll(st.pattern, st.replacement)
+                : s.replace(st.pattern, st.replacement);
+        }
+    }
+    catch {
+        return null;
+    }
+    return s;
+}
+/**
+ * Verdict for the replace chain whose text is `chainText` (the receiver plus the
+ * `.method(...)` segments after it).
+ */
+export function jsReplaceChainVerdict(chainText) {
+    const steps = parseSteps(chainText);
+    if (!steps || steps.length === 0)
+        return 'undecided';
+    // Another transform after the first replace may strip CR / LF on its own
+    // (`.split("\r").join("")`): the chain is only judged when every later
+    // segment is a replace or a harmless string method.
+    const first = chainText.search(/\.\s*(?:replaceAll|replace)\s*\(/);
+    for (const seg of chainText.slice(first + 1).matchAll(/\.\s*([A-Za-z_$][\w$]*)\s*\(/g)) {
+        if (!NEUTRAL_AFTER_REPLACE.has(seg[1]))
+            return 'undecided';
+    }
+    const out = run(steps, PROBE);
+    if (out === null)
+        return 'undecided';
+    return out.includes('\r') || out.includes('\n') ? 'leaves-crlf' : 'strips-crlf';
+}
+/**
+ * The text of the call chain that starts at (line, column): the receiver
+ * expression plus the `.method(...)` segments after it, up to the first
+ * character that cannot continue the chain at nesting depth 0. String and regex
+ * literals are skipped as units. The chain may continue over following lines.
+ */
+export function jsChainTextAt(sourceLines, line, column) {
+    const text = [(sourceLines[line - 1] ?? '').slice(column), ...sourceLines.slice(line, line + 7)].join('\n');
+    let depth = 0;
+    let prevSig = '';
+    let i = 0;
+    for (; i < text.length; i++) {
+        const c = text[i];
+        if (c === '"' || c === "'" || c === '`') {
+            for (i++; i < text.length && text[i] !== c; i++)
+                if (text[i] === '\\')
+                    i++;
+            prevSig = c;
+            continue;
+        }
+        if (c === '/' && depth > 0 && (prevSig === '(' || prevSig === ',')) {
+            const rx = readRegexLiteral(text, i);
+            if (rx) {
+                i = rx.end - 1;
+                prevSig = '/';
+                continue;
+            }
+        }
+        if (c === '(' || c === '[' || c === '{') {
+            depth++;
+            prevSig = c;
+            continue;
+        }
+        if (c === ')' || c === ']' || c === '}') {
+            if (depth === 0)
+                break;
+            depth--;
+            prevSig = c;
+            continue;
+        }
+        if (depth === 0 && !/[\w$.\s]/.test(c))
+            break;
+        if (!/\s/.test(c))
+            prevSig = c;
+    }
+    return text.slice(0, i);
+}
+//# sourceMappingURL=js-crlf-strip.js.map

package/dist/analysis/js-crlf-strip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"js-crlf-strip.js","sourceRoot":"","sources":["../../src/analysis/js-crlf-strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,wGAAwG;AACxG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU;IACnE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW;CACnD,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAE1C,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACjC,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG,EAAE,CAAC;oBACT,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACpB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBACnE,CAAC;gBACD,KAAK,GAAG,EAAE,CAAC;oBACT,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACpB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBACnE,CAAC;gBACD;oBACE,GAAG,IAAI,CAAC,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;IAC9C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF;;;GAGG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,iCAAiC,CAAC;IACjD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAA6B,CAAC;QAC9C,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,OAAwB,CAAC;QAC7B,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,kBAAkB;gBAAE,OAAO,IAAI,CAAC;YACvD,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YACzE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC;QACb,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;YACpB,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC;QACd,CAAC;QACD,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,KAAoB,EAAE,KAAa;IAC9C,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC,OAAO,YAAY,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChG,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,YAAY;gBAC1B,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;gBAC1C,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACrD,yEAAyE;IACzE,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,WAAW,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAqB,EAAE,IAAY,EAAE,MAAc;IAC/E,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;gBAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;YAC3E,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,EAAE,EAAE,CAAC;gBAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,GAAG,CAAC;gBAAC,SAAS;YAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM;YACvB,KAAK,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/analysis/passes/csharp-sanitizer-credit.d.ts

@@ -43,6 +43,11 @@ export declare const CSHARP_ALLOWLIST_STRIP_RE: RegExp;
 export declare const CSHARP_SANITIZER_RES: Array<{
     re: RegExp;
     type: string;
+    unlessDeclared?: string;
+}>;
+export declare function csharpSanitizersFor(code: string): ReadonlyArray<{
+    re: RegExp;
+    type: string;
 }>;
 export interface CsMethodRange {
     name: string;
@@ -54,6 +59,7 @@ export declare class CSharpCredit {
     private readonly lines;
     private readonly helperCache;
     private readonly guardHelperCache;
+    private readonly sanitizers;
     constructor(code: string, methods: ReadonlyArray<CsMethodRange>);
     /** The innermost method containing `line`, or null. */
     private methodAt;
@@ -74,6 +80,12 @@ export declare class CSharpCredit {
     private returnExprs;
     /** Does `text` apply a sanitizer for `type`, built in or a same-file helper? */
     sanitizes(type: string, text: string): boolean;
+    /** Decode applied to a built-in sanitizer call undoes the encode (cognium-dev#736). */
+    private rhsDecodeUndoesSanitizer;
+    /** True when a value built from `rhs` is still safe for `type` given `sanitized` so far. */
+    private rhsKeepsSanitizerCredit;
+    /** Assignments and appends in one statement line, in source order. */
+    private creditOpsInStatement;
     private sanitizedVarsIn;
     /**
      * The variables sanitized for `type` at `sinkLine`, judged inside the method
@@ -84,6 +96,19 @@ export declare class CSharpCredit {
      * and read in another.
      */
     sanitizedVarsAt(type: string, sinkLine: number): Set<string>;
+    /**
+     * Class fields judged across every method that writes them (cognium-dev#808).
+     * A field is read in one method and written in others, so each write is
+     * judged in its own method with the same in-method credit as a local, and
+     * the field is safe for `type` only when every write is: `sanitized` holds
+     * the fields with at least one credited write and no uncredited one,
+     * `unsanitized` the fields with an uncredited write. A literal write
+     * (`_v = "";`, `_v = null;`) is neutral.
+     */
+    fieldWrites(type: string, fields: ReadonlySet<string>): {
+        sanitized: Set<string>;
+        unsanitized: Set<string>;
+    };
     /**
      * True when the sink on `sinkLine` also receives a tainted value that no
      * sanitizer covers. In `Write(HtmlEncode(a) + b)` the encoder covers `a`

package/dist/analysis/passes/csharp-sanitizer-credit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csharp-sanitizer-credit.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/csharp-sanitizer-credit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,yBAAyB,QACyE,CAAC;AA8BhH,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAsBpE,CAAC;AAYF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAsDD,qBAAa,YAAY;IAKG,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJlD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6C;IAE9E,YAAY,IAAI,EAAE,MAAM,EAAmB,OAAO,EAAE,aAAa,CAAC,aAAa,CAAC,EAG/E;IAED,uDAAuD;IACvD,OAAO,CAAC,QAAQ;IAShB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAiBlB,yDAAyD;IACzD,OAAO,CAAC,gBAAgB;IAkBxB;;;;OAIG;IACH,OAAO,CAAC,OAAO;IAkBf,gFAAgF;IAChF,OAAO,CAAC,WAAW;IAYnB,gFAAgF;IAChF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7C;IAED,OAAO,CAAC,eAAe;IAevB;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAE3D;IAED;;;;;;;;;;;OAWG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAC7B,KAAK,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GACvD,OAAO,CAyBT;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAcxB,gFAAgF;IAChF,OAAO,CAAC,qBAAqB;IAuB7B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI7B;IAMD,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAqBrB,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IAWnB,oFAAoF;IACpF,OAAO,CAAC,QAAQ;IAsBhB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,QAAQ;IAuBhB;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAuEzD;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CA2BzE;IAED;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAM,GAAG,OAAO,CAYnG;IAMD;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkB1C;CACF"}
+{"version":3,"file":"csharp-sanitizer-credit.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/csharp-sanitizer-credit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,yBAAyB,QACyE,CAAC;AA8BhH,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CA+B7F,CAAC;AAsBF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAM7F;AAYD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkFD,qBAAa,YAAY;IAMG,OAAO,CAAC,QAAQ,CAAC,OAAO;IALlD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6C;IAC9E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8C;IAEzE,YAAY,IAAI,EAAE,MAAM,EAAmB,OAAO,EAAE,aAAa,CAAC,aAAa,CAAC,EAI/E;IAED,uDAAuD;IACvD,OAAO,CAAC,QAAQ;IAShB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAiBlB,yDAAyD;IACzD,OAAO,CAAC,gBAAgB;IAkBxB;;;;OAIG;IACH,OAAO,CAAC,OAAO;IAkBf,gFAAgF;IAChF,OAAO,CAAC,WAAW;IAYnB,gFAAgF;IAChF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7C;IAED,uFAAuF;IACvF,OAAO,CAAC,wBAAwB;IAShC,4FAA4F;IAC5F,OAAO,CAAC,uBAAuB;IAiB/B,sEAAsE;IACtE,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,eAAe;IAgBvB;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAE3D;IAED;;;;;;;;OAQG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG;QAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;KAAE,CAuB3G;IAED;;;;;;;;;;;OAWG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAC7B,KAAK,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GACvD,OAAO,CAyBT;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAcxB,gFAAgF;IAChF,OAAO,CAAC,qBAAqB;IAuB7B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI7B;IAMD,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAqBrB,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IAWnB,oFAAoF;IACpF,OAAO,CAAC,QAAQ;IAsBhB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,QAAQ;IAuBhB;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAuEzD;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CA2BzE;IAED;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAM,GAAG,OAAO,CAYnG;IAMD;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkB1C;CACF"}

package/dist/analysis/passes/csharp-sanitizer-credit.js

@@ -69,6 +69,15 @@ export const CSHARP_SANITIZER_RES = [
     { re: /\b(?:HtmlEncode|JavaScriptStringEncode)\s*\(/, type: 'xss' },
     // `HtmlEncoder.Default.Encode(x)` is the ASP.NET Core spelling (#520).
     { re: /\bHtmlEncoder\s*\.\s*(?:Default\s*\.\s*)?Encode\s*\(/, type: 'xss' },
+    // `UrlEncoder.Default.Encode(x)` percent-encodes `<`, `"` and `'` (#564). A
+    // project type that declares its own `UrlEncoder` is not the framework's.
+    // Qualified `Evil.UrlEncoder` must not match (#736 case 6); only the framework
+    // type or an unqualified `UrlEncoder` after `using System.Text.Encodings.Web`.
+    {
+        re: /(?:System\.Text\.Encodings\.Web\.UrlEncoder|(?<![\w.])UrlEncoder)\s*\.\s*Default\s*\.\s*Encode\s*\(/,
+        type: 'xss',
+        unlessDeclared: 'UrlEncoder',
+    },
     { re: /\bPath\s*\.\s*GetFileName\s*\(/, type: 'path_traversal' },
     // XML-escapes `< > & " '`. A value escaped this way cannot close the quoted
     // literal it is placed in, which is what XPath injection needs.
@@ -88,6 +97,31 @@ export const CSHARP_SANITIZER_RES = [
     { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'crlf' },
     ...CSHARP_ONE_WAY_HASH_RES.map(re => ({ re, type: 'external_taint_escape' })),
 ];
+/**
+ * The built-in sanitizers that apply to `code`: those gated on a type name
+ * (`unlessDeclared`) are dropped when the file declares a type of that name.
+ */
+const FRAMEWORK_URL_ENCODER = 'System.Text.Encodings.Web.UrlEncoder';
+/** True when `UrlEncoder` in source text is not the framework encoder (#736 case 5). */
+function csharpUrlEncoderShadowed(code) {
+    if (new RegExp(`\\b(?:class|struct|record|interface|enum)\\s+UrlEncoder\\b`).test(code)) {
+        return true;
+    }
+    const aliasRe = /\busing\s+UrlEncoder\s*=\s*([^;\n]+)\s*;/g;
+    for (const m of code.matchAll(aliasRe)) {
+        const target = m[1].trim();
+        if (target === FRAMEWORK_URL_ENCODER || target.endsWith('.' + FRAMEWORK_URL_ENCODER))
+            continue;
+        return true;
+    }
+    return false;
+}
+export function csharpSanitizersFor(code) {
+    const declared = (name) => name === 'UrlEncoder'
+        ? csharpUrlEncoderShadowed(code)
+        : new RegExp(`\\b(?:class|struct|record|interface|enum)\\s+${name}\\b`).test(code);
+    return CSHARP_SANITIZER_RES.filter(r => !r.unlessDeclared || !declared(r.unlessDeclared));
+}
 /**
  * Sink types for which a value made only of letters, digits, `_` and `-` is
  * inert: each needs a metacharacter (quote, paren, slash, angle bracket, CR/LF)
@@ -99,7 +133,11 @@ const INERT_WHEN_ALPHANUMERIC = new Set([
 ]);
 const IDENT = '[A-Za-z_]\\w*';
 const ASSIGN_RE = new RegExp(`^\\s*(?:var\\s+|[A-Za-z_][\\w.<>\\[\\]?]*\\s+)?(${IDENT})\\s*=(?!=)\\s*(.+?);?\\s*$`);
+const INNER_ASSIGN_RE = new RegExp(`\\b(${IDENT})\\s*=(?!=)\\s*([^;{}]+)`, 'g');
+const APPEND_RE = new RegExp(`^\\s*(${IDENT})\\s*\\+=\\s*(.+?);?\\s*$`);
 const ENDS_STATEMENT_RE = /[;{}]\s*(?:\/\/.*)?$/;
+/** Percent-decoding after encode restores raw bytes (cognium-dev#736 case 4). */
+const CSHARP_DECODE_CALL_HEAD_RE = /\b(?:System\.Net\.)?WebUtility\s*\.\s*UrlDecode\s*\(|HttpUtility\s*\.\s*UrlDecode\s*\(|Uri\s*\.\s*UnescapeDataString\s*\(/g;
 function escapeRegex(s) {
     return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
@@ -109,6 +147,30 @@ function withoutStringLiterals(text) {
 function mentions(text, name) {
     return new RegExp(`(?<![\\w])${escapeRegex(name)}(?![\\w])`).test(text);
 }
+/** True when `text` still names a variable after literals are stripped (cognium-dev#736). */
+function hasBareIdentifier(text) {
+    if (/\$"/.test(text))
+        return true;
+    return /\b[A-Za-z_]\w*\b/.test(withoutStringLiterals(text));
+}
+/** Identifier tokens in `text` after literals are stripped (cognium-dev#736 case 2). */
+function bareIdentifiers(text) {
+    if (/\$"/.test(text))
+        return ['__interpolated__'];
+    const stripped = withoutStringLiterals(text);
+    const out = [];
+    for (const m of stripped.matchAll(/\b([A-Za-z_]\w*)\b/g))
+        out.push(m[1]);
+    return out;
+}
+/** `""`, `null`, `0`, `string.Empty`: a value that carries nothing from input. */
+function isLiteralValue(rhs) {
+    if (/\$"/.test(rhs))
+        return false;
+    const ids = bareIdentifiers(rhs);
+    return ids.every(id => id === 'null' || id === 'true' || id === 'false' || id === 'default')
+        || /^\s*(?:string|String)\s*\.\s*Empty\s*$/.test(rhs);
+}
 /** Text inside the parentheses opening at `open`, or null when unbalanced. */
 function insideParens(text, open) {
     let depth = 0;
@@ -151,8 +213,10 @@ export class CSharpCredit {
     lines;
     helperCache = new Map();
     guardHelperCache = new Map();
+    sanitizers;
     constructor(code, methods) {
         this.methods = methods;
+        this.sanitizers = csharpSanitizersFor(code);
         // CRLF files leave `\r` on every line, which `.` and `$` will not cross.
         this.lines = code.split(/\r?\n/);
     }
@@ -190,7 +254,7 @@ export class CSharpCredit {
     }
     /** Does `text` apply a built-in sanitizer for `type`? */
     builtinSanitizes(type, text) {
-        for (const { re, type: t } of CSHARP_SANITIZER_RES) {
+        for (const { re, type: t } of this.sanitizers) {
             if (t === type && re.test(text))
                 return true;
         }
@@ -259,19 +323,60 @@ export class CSharpCredit {
         }
         return false;
     }
+    /** Decode applied to a built-in sanitizer call undoes the encode (cognium-dev#736). */
+    rhsDecodeUndoesSanitizer(type, rhs) {
+        for (const m of rhs.matchAll(CSHARP_DECODE_CALL_HEAD_RE)) {
+            const open = m.index + m[0].length - 1;
+            const inner = insideParens(rhs, open);
+            if (inner !== null && this.builtinSanitizes(type, inner))
+                return true;
+        }
+        return false;
+    }
+    /** True when a value built from `rhs` is still safe for `type` given `sanitized` so far. */
+    rhsKeepsSanitizerCredit(type, rhs, sanitized, withHelpers, append) {
+        if (!append && this.rhsDecodeUndoesSanitizer(type, rhs))
+            return false;
+        if (withHelpers ? this.sanitizes(type, rhs) : this.builtinSanitizes(type, rhs))
+            return true;
+        if (append) {
+            if (!hasBareIdentifier(rhs))
+                return true;
+            return bareIdentifiers(rhs).every(id => sanitized.has(id));
+        }
+        const ids = bareIdentifiers(rhs);
+        return ids.length > 0 && ids.every(id => sanitized.has(id));
+    }
+    /** Assignments and appends in one statement line, in source order. */
+    creditOpsInStatement(text) {
+        const append = APPEND_RE.exec(text);
+        if (append)
+            return [{ kind: 'append', lhs: append[1], rhs: append[2] }];
+        const head = ASSIGN_RE.exec(text);
+        if (head)
+            return [{ kind: 'assign', lhs: head[1], rhs: head[2] }];
+        const out = [];
+        for (const m of text.matchAll(INNER_ASSIGN_RE)) {
+            out.push({ kind: 'assign', lhs: m[1], rhs: m[2].trim() });
+        }
+        return out;
+    }
     sanitizedVarsIn(type, from, to, withHelpers) {
         const sanitized = new Set();
         for (const st of this.statements(from, to)) {
-            const m = ASSIGN_RE.exec(st.text);
-            if (!m)
-                continue;
-            const [, lhs, rhs] = m;
-            const credited = (withHelpers ? this.sanitizes(type, rhs) : this.builtinSanitizes(type, rhs)) ||
-                [...sanitized].some(v => mentions(rhs, v));
-            if (credited)
-                sanitized.add(lhs);
-            else
-                sanitized.delete(lhs);
+            for (const op of this.creditOpsInStatement(st.text)) {
+                if (op.kind === 'append') {
+                    if (!sanitized.has(op.lhs))
+                        continue;
+                    if (!this.rhsKeepsSanitizerCredit(type, op.rhs, sanitized, withHelpers, true))
+                        sanitized.delete(op.lhs);
+                    continue;
+                }
+                if (this.rhsKeepsSanitizerCredit(type, op.rhs, sanitized, withHelpers, false))
+                    sanitized.add(op.lhs);
+                else
+                    sanitized.delete(op.lhs);
+            }
         }
         return sanitized;
     }
@@ -286,6 +391,46 @@ export class CSharpCredit {
     sanitizedVarsAt(type, sinkLine) {
         return this.sanitizedVarsIn(type, this.methodAt(sinkLine)?.start_line ?? 1, sinkLine, true);
     }
+    /**
+     * Class fields judged across every method that writes them (cognium-dev#808).
+     * A field is read in one method and written in others, so each write is
+     * judged in its own method with the same in-method credit as a local, and
+     * the field is safe for `type` only when every write is: `sanitized` holds
+     * the fields with at least one credited write and no uncredited one,
+     * `unsanitized` the fields with an uncredited write. A literal write
+     * (`_v = "";`, `_v = null;`) is neutral.
+     */
+    fieldWrites(type, fields) {
+        const credited = new Set();
+        const unsanitized = new Set();
+        for (const m of this.methods) {
+            const sanitized = new Set();
+            for (const st of this.statements(m.start_line, m.end_line + 1)) {
+                // A nested method's statements belong to it, not to `m`.
+                if (this.methodAt(st.line) !== m)
+                    continue;
+                for (const op of this.creditOpsInStatement(st.text)) {
+                    const lhs = op.lhs;
+                    const keeps = op.kind === 'append'
+                        ? sanitized.has(lhs) && this.rhsKeepsSanitizerCredit(type, op.rhs, sanitized, true, true)
+                        : this.rhsKeepsSanitizerCredit(type, op.rhs, sanitized, true, false);
+                    if (keeps)
+                        sanitized.add(lhs);
+                    else
+                        sanitized.delete(lhs);
+                    if (!fields.has(lhs) || isLiteralValue(op.rhs))
+                        continue;
+                    if (keeps)
+                        credited.add(lhs);
+                    else
+                        unsanitized.add(lhs);
+                }
+            }
+        }
+        for (const f of unsanitized)
+            credited.delete(f);
+        return { sanitized: credited, unsanitized };
+    }
     /**
      * True when the sink on `sinkLine` also receives a tainted value that no
      * sanitizer covers. In `Write(HtmlEncode(a) + b)` the encoder covers `a`
@@ -361,7 +506,7 @@ export class CSharpCredit {
     /** `text` with every sanitizer call for `type`, arguments included, removed. */
     withoutSanitizerCalls(type, text) {
         const res = [];
-        for (const { re, type: t } of CSHARP_SANITIZER_RES)
+        for (const { re, type: t } of this.sanitizers)
             if (t === type)
                 res.push(re);
         for (const name of this.helpers(type))