3 years ago

Category: Security, Data, Microsoft

From the previous post we concluded that JavaScript contains a number of features that makes it a challenge to analyze and detect bugs in: To mitigate from these issues, Microsoft developed TypeScript, an open-source programming language that is a strict superset of JavaScript with static typing and class-based object-oriented programming. Thus, any existing JavaScript programs are also valid TypeScript programs.

To allow TypeScript programs to use existing JavaScript libraries, the DefinitelyTyped project provides a set of TypeScript declaration files for frequently used JavaScript libraries.

Given the ubiquity of JavaScript, it is crucial to discover security vulnerabilities possibly introduced by use of its dynamic features.

Taint analysis detects flows of data that violate program integrity and data confidentiality.