{ "ml": { "v": "7", "id": 5947, "lvl": -1, "conf": 0, "prob": 0.000008593003258283716, "type": "javascript", "version": "v18.18", "analyzed_at": "2026-09-23T23:12:52Z" }, "path": "package/bundles/compiler.umd.js.map##unicode-escape@346378", "raw": { "rev": "a041b", "files": [ { "id": 6281, "mol": "K(Am)O₂(As₂S)H₃(Cm₃Db₁₃F)Md₃(Bk₂Pa)", "pid": 52, "rel": "fetched", "sha": "65517ba2b8c2819b5a5f336a28bdbc647919f3112962fe2e89c1451da6137a45", "via": "https://registry.npmjs.org/@angular/compiler/-/compiler-11.0.0.tgz", "path": "pkg:npm/%40angular/compiler@11.0.0!!package/bundles/compiler.umd.js.map!!package/bundles/compiler.umd.js.map##unicode-escape@346378", "risk": 16, "size": 405701, "type": "javascript", "depth": 4, "facts": { "imp": [ [ "", "\\n" ], [ "", "this" ], [ "", "e.g." ], [ "", "this.foo" ], [ "", "ImplicitReceiver" ], [ "", "this" ], [ "", "=\\\"this.title\\\"" ], [ "", "$event" ], [ "", "$any" ], [ "", "ImplicitReceiver" ], [ "", "\\n\\nexport" ], [ "", "Unary" ], [ "", "Binary" ], [ "", "Binary" ], [ "", "never" ], [ "", "Unary" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\n\\n" ], [ "", "Binary" ], [ "", "span:" ], [ "", "Unary" ], [ "", "Binary" ], [ "", "span:" ], [ "", "Unary" ], [ "", "\\n" ], [ "", "expression" ], [ "", "key" ], [ "", "value" ], [ "", "binding" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "1." ], [ "", "item" ], [ "", "null" ], [ "", "variable" ], [ "", "\\n" ], [ "", "2." ], [ "", "ngForOf" ], [ "", "items" ], [ "", "expression" ], [ "", "\\n" ], [ "", "3." ], [ "", "variable" ], [ "", "\\n" ], [ "", "4." ], [ "", "index" ], [ "", "variable" ], [ "", "\\n" ], [ "", "5." ], [ "", "ngForTrackBy" ], [ "", "func" ], [ "", "expression" ], [ "", "\\n" ], [ "", "6." ], [ "", "ngIf" ], [ "", "cond" ], [ "", "expression" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "key.source.length" ], [ "", "\\n" ], [ "", "this" ], [ "", "\\n" ], [ "", "ast:" ], [ "", "AST" ], [ "", "this" ], [ "", "\\n" ], [ "", "expr" ], [ "", "switch" ], [ "", "ast.operator" ], [ "", "\\n" ], [ "", "ast.span," ], [ "", "=\\\"expression\\\"" ], [ "", "=\\\"expression\\\"" ], [ "", "=\\\"condition\\\"" ], [ "", "=\\\"expression\\\"" ], [ "", "\\n\",\"/**\\n" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\n\\nexport" ], [ "", "'$event'" ], [ "", "\\n}" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\\"" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "\\n\\n" ], [ "", "form" ], [ "", "\\n\\n/**\\n" ], [ "", "':\\n op = o.BinaryOperator.And;\\n break;\\n case '" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "ast.name" ], [ "", "\\n" ], [ "", "\\n\\n" ], [ "", "\\n" ], [ "", "\\n" ], [ "", "' + scopeSelector + '" ], [ "", ":host-context" ], [ "", "div" ], [ "", "div" ], [ "", "component-tag:host" ], [ "", "it" ], [ "", ".\\n" ], [ "", "tag:host" ], [ "", "` (this is to avoid breaking legacy apps, should not match anything)\\n // - `tag" ], [ "", "this" ], [ "", "\\n" ], [ "", "tag" ], [ "", "`tag`" ], [ "", "tag" ], [ "", "\\nconst" ], [ "", "\\n//" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "'('" ], [ "", "\\nconst" ], [ "", "'('" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\n\\n//" ], [ "", "`, `::ng-deep" ], [ "", "?:\\\\/deep\\\\/" ], [ "", "?:::ng-deep" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\n\\nconst" ], [ "", "\\n\\nfunction" ], [ "", "input:" ], [ "", "string" ], [ "", "_commentRe," ], [ "", "\\n}" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "?:\\\\s*" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\nconst" ], [ "", "\\\"" ], [ "", "\\\"" ], [ "", "'`, `'" ], [ "", "\\n\\nexport" ], [ "", "rule:" ], [ "", "input," ], [ "", "\\n" ], [ "", "inputWithEscapedQuotes.escapedString," ], [ "", "\\n" ], [ "", "...m:" ], [ "", "suffix" ], [ "", "suffix.startsWith" ], [ "", "'{'" ], [ "", "BLOCK_PLACEHOLDER.length" ], [ "", "StringWithEscapedBlocks" ], [ "", "undefined" ], [ "", "undefined" ], [ "", "let" ], [ "", "i++" ], [ "", "char" ], [ "", "char" ], [ "", "input.substring" ], [ "", "nonBlockStartIndex" ], [ "", "resultParts.join" ], [ "", "''" ], [ "", "\\n\",\"/**\\n" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\n\\nconst" ], [ "", "\\nexport" ], [ "", "_nghost-${COMPONENT_VARIABLE}" ], [ "", "\\nexport" ], [ "", "_ngcontent-${COMPONENT_VARIABLE}" ], [ "", "and" ], [ "", ".\\n" ], [ "", "\\nimport" ], [ "", "\\nimport" ], [ "", "\\n\\nexport" ], [ "", "ast.children" ], [ "", "ast.children.length" ], [ "", "\\n}" ], [ "", "\\n\\n" ], [ "", "visitor," ], [ "", "\\n\\n" ], [ "", "path," ], [ "", "\\n}" ], [ "", "\\nimport" ], [ "", "\\n\\nimport" ], [ "", "\\nimport" ], [ "", "\\n\\nexport" ], [ "", "considered" ], [ "", "source" ], [ "", "source" ], [ "", "\\\"" ], [ "", "\\\\n" ], [ "", "charCode" ], [ "", "\\n}" ], [ "", "entitySrc:" ], [ "", "Unknown" ], [ "", "*/\\n" ], [ "", "*/\\nexport" ], [ "", "Angular" ], [ "", "ImplicitReceiver" ], [ "", "Note" ], [ "", "TODO:" ], [ "", "ThisReceiver" ], [ "", "\\n" ], [ "", "accessing" ], [ "", "an" ], [ "", "and" ], [ "", "as" ], [ "", "because" ], [ "", "boolean" ], [ "", "class" ], [ "", "class\\n" ], [ "", "extend" ], [ "", "extends" ], [ "", "find" ], [ "", "for" ], [ "", "from" ], [ "", "future.\\n" ], [ "", "implicitly" ], [ "", "in" ], [ "", "inherits" ], [ "", "inside" ], [ "", "is" ], [ "", "it" ], [ "", "not" ], [ "", "of" ], [ "", "same" ], [ "", "should" ], [ "", "something" ], [ "", "that" ], [ "", "the" ], [ "", "the\\n" ], [ "", "this" ], [ "", "through" ], [ "", "to" ], [ "", "tokenizeExpansionForms?:" ], [ "", "treated" ], [ "", "visit" ], [ "", "way" ], [ "", "we" ] ], "tgt": [ "$any", "$event", "' + _selectorReSuffix, 'm');\\n }\\n\\n private _applySelectorScope(selector: string, scopeSelector: string, hostSelector: string):\\n string {\\n // Difference from webcomponents.js: scopeSelector could not be an array\\n return this._applySimpleSelectorScope(selector, scopeSelector, hostSelector);\\n }\\n\\n // scope via name and [is=name]\\n private _applySimpleSelectorScope(selector: string, scopeSelector: string, hostSelector: string):\\n string {\\n // In Android browser, the lastIndex is not reset when the regex is used in String.replace()\\n _polyfillHostRe.lastIndex = 0;\\n if (_polyfillHostRe.test(selector)) {\\n const replaceBy = this.strictStyling ? `[${hostSelector}]` : scopeSelector;\\n return selector\\n .replace(\\n _polyfillHostNoCombinatorRe,\\n (hnc, selector) =\u003e {\\n return selector.replace(\\n /([^:]*)(:*)(.*)/,\\n (_: string, before: string, colon: string, after: string) =\u003e {\\n return before + replaceBy + colon + after;\\n });\\n })\\n .replace(_polyfillHostRe, replaceBy + '", "' + scopeSelector + '", "'$event'", "''", "'('", "':\\n op = o.BinaryOperator.And;\\n break;\\n case '", "':\\n op = o.BinaryOperator.Or;\\n break;\\n case '==':\\n op = o.BinaryOperator.Equals;\\n break;\\n case '!=':\\n op = o.BinaryOperator.NotEquals;\\n break;\\n case '===':\\n op = o.BinaryOperator.Identical;\\n break;\\n case '!==':\\n op = o.BinaryOperator.NotIdentical;\\n break;\\n case '", "'`, `'", "'{'", ",", ".", "...m:", ".\\n", "1.", "2.", "3.", "4.", "5.", "6.", ":host-context", "=\\\"condition\\\"", "=\\\"expression\\\"", "=\\\"this.title\\\"", "?", "?:::ng-deep", "?:\\\\/deep\\\\/", "?:\\\\s*", "AST", "BLOCK_PLACEHOLDER.length", "Binary", "ImplicitReceiver", "StringWithEscapedBlocks", "Unary", "Unknown", "\\\"", "\\\\n", "\\n", "\\n\",\"/**\\n", "\\n//", "\\n\\n", "\\n\\n/**\\n", "\\n\\n//", "\\n\\nconst", "\\n\\nexport", "\\n\\nfunction", "\\n\\nimport", "\\nconst", "\\nexport", "\\nimport", "\\n}", "_commentRe,", "_ngcontent-${COMPONENT_VARIABLE}", "_nghost-${COMPONENT_VARIABLE}", "` (this is to avoid breaking legacy apps, should not match anything)\\n // - `tag", "`, `::ng-deep", "`tag`", "a", "and", "ast.children", "ast.children.length", "ast.name", "ast.operator", "ast.span,", "ast:", "binding", "char", "charCode", "component-tag:host", "cond", "considered", "div", "e.g.", "entitySrc:", "expr", "expression", "fac',\\n /* type */ o.INFERRED_TYPE,\\n /* modifiers */[o.StmtModifier.Static],\\n /* initializer */ factoryRes.factory)],\\n /* getters */[],\\n /* constructorMethod */ new o.ClassMethod(null, [], []),\\n /* methods */[]);\\n const pipeDefStatement = new o.ClassStmt(\\n /* name */ name,\\n /* parent */ null,\\n /* fields */[new o.ClassField(\\n /* name */ definitionField,\\n /* type */ o.INFERRED_TYPE,\\n /* modifiers */[o.StmtModifier.Static],\\n /* initializer */ res.expression)],\\n /* getters */[],\\n /* constructorMethod */ new o.ClassMethod(null, [], []),\\n /* methods */[]);\\n\\n outputCtx.statements.push(ngFactoryDefStatement, pipeDefStatement);\\n}\\n\",\"/**\\n * @license\\n * Copyright Google LLC All Rights Reserved.\\n *\\n * Use of this source code is governed by an MIT-style license that can be\\n * found in the LICENSE file at https://angular.io/license\\n */\\n\\nimport {SecurityContext} from '../core';\\nimport {ParseSourceSpan} from '../parse_util';\\n\\nexport class ParserError {\\n public message: string;\\n constructor(\\n message: string, public input: string, public errLocation: string, public ctxLocation?: any) {\\n this.message = `Parser Error: ${message} ${errLocation} [${input}] in ${ctxLocation}`;\\n }\\n}\\n\\nexport class ParseSpan {\\n constructor(public start: number, public end: number) {}\\n toAbsolute(absoluteOffset: number): AbsoluteSourceSpan {\\n return new AbsoluteSourceSpan(absoluteOffset + this.start, absoluteOffset + this.end);\\n }\\n}\\n\\nexport class AST {\\n constructor(\\n public span: ParseSpan,\\n /**\\n * Absolute location of the expression AST in a source code file.\\n */\\n public sourceSpan: AbsoluteSourceSpan) {}\\n visit(visitor: AstVisitor, context: any = null): any {\\n return null;\\n }\\n toString(): string {\\n return 'AST';\\n }\\n}\\n\\nexport abstract class ASTWithName extends AST {\\n constructor(\\n span: ParseSpan, sourceSpan: AbsoluteSourceSpan, public nameSpan: AbsoluteSourceSpan) {\\n super(span, sourceSpan);\\n }\\n}\\n\\n/**\\n * Represents a quoted expression of the form:\\n *\\n * quote = prefix `:` uninterpretedExpression\\n * prefix = identifier\\n * uninterpretedExpression = arbitrary string\\n *\\n * A quoted expression is meant to be pre-processed by an AST transformer that\\n * converts it into another AST that no longer contains quoted expressions.\\n * It is meant to allow third-party developers to extend Angular template\\n * expression language. The `uninterpretedExpression` part of the quote is\\n * therefore not interpreted by the Angular's", "form", "func", "i", "i++", "index", "input,", "input.substring", "input:", "inputWithEscapedQuotes.escapedString,", "it", "item", "items", "key", "key.source.length", "let", "never", "ngForOf", "ngForTrackBy", "ngIf", "nonBlockStartIndex", "null", "path,", "resultParts.join", "rule:", "source", "span:", "string", "suffix", "suffix.startsWith", "switch", "tag", "tag:host", "this", "this.foo", "undefined", "value", "variable", "visitor,", "x", "y" ], "metrics": { "ast": { "max_depth": 11, "call_count": 260, "node_count": 4692, "max_array_len": 1 }, "file": { "size": 405701, "entropy": 4.9 }, "text": { "lines": 1, "top_char": 101, "max_ws_run": 43, "digit_ratio": 0, "space_count": 70543, "char_entropy": 4.9, "unique_chars": 114, "top_char_null": 0, "escape_density": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 137, "top_char_ratio": 0.08, "avg_line_length": 405701, "invisible_chars": 1, "lines_over_1000": 1, "max_line_length": 405701, "non_ascii_ratio": 0, "last_line_length": 405701, "long_token_count": 35, "whitespace_ratio": 0.17, "identifier_density": 2946, "octal_escape_count": 4, "unusual_whitespace": 6, "unicode_escape_count": 1, "normalized_string_count": 137, "repeated_char_sequences": 754, "suspicious_string_ratio": 0.21, "suspicious_identifier_ratio": 0.02 }, "binds": { "count": 1 }, "calls": { "dynamic_target_count": 6, "obfuscated_target_count": 21 }, "binary": { "peak_region_bytes": 37888, "peak_region_entropy": 5.39 }, "imports": { "count": 47, "wildcard": 3, "third_party_count": 47, "third_party_ratio": 1 }, "strings": { "sql": 3, "bytes": 43547, "count": 137, "shell": 13, "very_long": 9, "avg_length": 317.86, "max_length": 10422, "path_count": 17, "avg_entropy": 2.97, "email_count": 3, "empty_count": 4, "entropy_stddev": 1.61, "embedded_code_candidates": 13 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 2946, "unique": 1091, "avg_length": 53.99, "max_length": 2665, "min_length": 1, "avg_entropy": 2.88, "reuse_ratio": 0.37, "length_stddev": 157.79, "has_digit_ratio": 0.05, "sequential_names": 12, "base64_like_names": 1, "single_char_count": 28, "single_char_ratio": 0.03, "high_entropy_count": 324, "high_entropy_ratio": 0.3, "all_lowercase_ratio": 0.28, "all_uppercase_ratio": 0.01, "repeated_char_names": 5, "numeric_suffix_count": 3, "keyboard_pattern_names": 1, "underscore_prefix_count": 26 } } }, "traits": [ { "id": "metadata/import/npm/n::n", "conf": 0.95, "crit": 2, "desc": "imports */\\n", "spans": [ [ 105959, 0 ] ] }, { "id": "metadata/import/npm/nexport::nexport", "conf": 0.95, "crit": 2, "desc": "imports */\\nexport", "spans": [ [ 3978, 0 ] ] }, { "id": "metadata/import/npm/angular::angular", "conf": 0.95, "crit": 2, "desc": "imports Angular", "spans": [ [ 3630, 0 ] ] }, { "id": "metadata/import/npm/implicitreceiver::implicitreceiver", "conf": 0.95, "crit": 2, "desc": "imports ImplicitReceiver", "spans": [ [ 4016, 0 ] ] }, { "id": "metadata/import/npm/note::note", "conf": 0.95, "crit": 2, "desc": "imports Note", "spans": [ [ 3464, 0 ] ] }, { "id": "metadata/import/npm/todo::todo", "conf": 0.95, "crit": 2, "desc": "imports TODO:", "spans": [ [ 3881, 0 ] ] }, { "id": "metadata/import/npm/thisreceiver::thisreceiver", "conf": 0.95, "crit": 2, "desc": "imports ThisReceiver", "spans": [ [ 3995, 0 ] ] }, { "id": "metadata/import/npm/a::a", "conf": 0.95, "crit": 2, "desc": "imports a", "spans": [ [ 3902, 0 ] ] }, { "id": "metadata/import/npm/accessing::accessing", "conf": 0.95, "crit": 2, "desc": "imports accessing", "spans": [ [ 3531, 0 ] ] }, { "id": "metadata/import/npm/an::an", "conf": 0.95, "crit": 2, "desc": "imports an", "spans": [ [ 3627, 0 ] ] }, { "id": "metadata/import/npm/and::and", "conf": 0.95, "crit": 2, "desc": "imports and", "spans": [ [ 3865, 0 ] ] }, { "id": "metadata/import/npm/as::as", "conf": 0.95, "crit": 2, "desc": "imports as", "spans": [ [ 3590, 0 ] ] }, { "id": "metadata/import/npm/because::because", "conf": 0.95, "crit": 2, "desc": "imports because", "spans": [ [ 3523, 0 ] ] }, { "id": "metadata/import/npm/boolean::boolean", "conf": 0.95, "crit": 2, "desc": "imports boolean", "spans": [ [ 105990, 0 ] ] }, { "id": "metadata/import/npm/class::class", "conf": 0.95, "crit": 2, "desc": "imports class", "spans": [ [ 3917, 0 ] ] }, { "id": "metadata/import/npm/class/n::class/n", "conf": 0.95, "crit": 2, "desc": "imports class\\n", "spans": [ [ 3479, 0 ] ] }, { "id": "metadata/import/npm/extend::extend", "conf": 0.95, "crit": 2, "desc": "imports extend", "spans": [ [ 3930, 0 ] ] }, { "id": "metadata/import/npm/extends::extends", "conf": 0.95, "crit": 2, "desc": "imports extends", "spans": [ [ 4008, 0 ] ] }, { "id": "metadata/import/npm/find::find", "conf": 0.95, "crit": 2, "desc": "imports find", "spans": [ [ 3897, 0 ] ] }, { "id": "metadata/import/npm/for::for", "conf": 0.95, "crit": 2, "desc": "imports for", "spans": [ [ 3908, 0 ] ] }, { "id": "metadata/import/npm/from::from", "conf": 0.95, "crit": 2, "desc": "imports from", "spans": [ [ 3498, 0 ] ] }, { "id": "metadata/import/npm/future/n::future/n", "conf": 0.95, "crit": 2, "desc": "imports future.\\n", "spans": [ [ 3968, 0 ] ] }, { "id": "metadata/import/npm/implicitly::implicitly", "conf": 0.95, "crit": 2, "desc": "imports implicitly", "spans": [ [ 3606, 0 ] ] }, { "id": "metadata/import/npm/in::in", "conf": 0.95, "crit": 2, "desc": "imports in", "spans": [ [ 3961, 0 ] ] }, { "id": "metadata/import/npm/inherits::inherits", "conf": 0.95, "crit": 2, "desc": "imports inherits", "spans": [ [ 3489, 0 ] ] }, { "id": "metadata/import/npm/inside::inside", "conf": 0.95, "crit": 2, "desc": "imports inside", "spans": [ [ 3617, 0 ] ] }, { "id": "metadata/import/npm/is::is", "conf": 0.95, "crit": 2, "desc": "imports is", "spans": [ [ 3566, 0 ] ] }, { "id": "metadata/import/npm/it::it", "conf": 0.95, "crit": 2, "desc": "imports it", "spans": [ [ 3603, 0 ] ] }, { "id": "metadata/import/npm/not::not", "conf": 0.95, "crit": 2, "desc": "imports not", "spans": [ [ 3923, 0 ] ] }, { "id": "metadata/import/npm/of::of", "conf": 0.95, "crit": 2, "desc": "imports of", "spans": [ [ 3624, 0 ] ] }, { "id": "metadata/import/npm/same::same", "conf": 0.95, "crit": 2, "desc": "imports same", "spans": [ [ 3585, 0 ] ] }, { "id": "metadata/import/npm/should::should", "conf": 0.95, "crit": 2, "desc": "imports should", "spans": [ [ 3890, 0 ] ] }, { "id": "metadata/import/npm/something::something", "conf": 0.95, "crit": 2, "desc": "imports something", "spans": [ [ 3541, 0 ] ] }, { "id": "metadata/import/npm/that::that", "conf": 0.95, "crit": 2, "desc": "imports that", "spans": [ [ 3469, 0 ] ] }, { "id": "metadata/import/npm/the::the", "conf": 0.95, "crit": 2, "desc": "imports the", "spans": [ [ 3690, 0 ] ] }, { "id": "metadata/import/npm/the/n::the/n", "conf": 0.95, "crit": 2, "desc": "imports the\\n", "spans": [ [ 3577, 0 ] ] }, { "id": "metadata/import/npm/this::this", "conf": 0.95, "crit": 2, "desc": "imports this", "spans": [ [ 3474, 0 ] ] }, { "id": "metadata/import/npm/through::through", "conf": 0.95, "crit": 2, "desc": "imports through", "spans": [ [ 3551, 0 ] ] }, { "id": "metadata/import/npm/to::to", "conf": 0.95, "crit": 2, "desc": "imports to", "spans": [ [ 3927, 0 ] ] }, { "id": "metadata/import/npm/tokenizeexpansionforms::tokenizeexpansionforms", "conf": 0.95, "crit": 2, "desc": "imports tokenizeExpansionForms?:", "spans": [ [ 105965, 0 ] ] }, { "id": "metadata/import/npm/treated::treated", "conf": 0.95, "crit": 2, "desc": "imports treated", "spans": [ [ 3569, 0 ] ] }, { "id": "metadata/import/npm/visit::visit", "conf": 0.95, "crit": 2, "desc": "imports visit", "spans": [ [ 4038, 0 ] ] }, { "id": "metadata/import/npm/way::way", "conf": 0.95, "crit": 2, "desc": "imports way", "spans": [ [ 3904, 0 ] ] }, { "id": "metadata/import/npm/we::we", "conf": 0.95, "crit": 2, "desc": "imports we", "spans": [ [ 3887, 0 ] ] }, { "id": "metadata/build/minifier::js-min-or-map-basename", "conf": 0.9, "crit": 3, "desc": "JavaScript minified or map basename" }, { "id": "metadata/build/toolchain::lex-word", "conf": 1.0, "crit": 3, "desc": "lex lexer-generator tool name", "spans": [ [ 142867, 5 ] ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates" }, { "id": "metadata/lang/generated::automatically-generated-source-marker", "conf": 0.85, "crit": 2, "desc": "Generated source provenance marker", "spans": [ [ 117423, 0 ] ] }, { "id": "metadata/lang/javascript-features::es6-class", "conf": 0.9, "crit": 2, "desc": "ES6 class declaration", "spans": [ [ 1072, 0 ] ] }, { "id": "metadata/lang/locale::language-label-code-de", "conf": 0.97, "crit": 2, "desc": "German UI language code", "spans": [ [ 320000, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 918, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 3865, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 893, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8836, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 3748, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 9890, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 840, 0 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 378708, 3 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 70380, 19 ] ] }, { "id": "micro-behaviors/communications/url/encoded::encoded-url-mdn-doc-context", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Encoded URL references MDN documentation", "spans": [ [ 158496, 22 ] ] }, { "id": "micro-behaviors/communications/url/encoded::encoded-url-public-doc-context", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Encoded URL public documentation", "spans": [ [ 163213, 12 ] ] }, { "id": "micro-behaviors/data/config/schema::uppercase-host-assignment-label", "conf": 0.6, "crit": 1, "desc": "Uppercase HOST assignment label", "spans": [ [ 93537, 0 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 79654, 17 ], [ 82965, 25 ], [ 84203, 14 ], [ 84467, 55 ], [ 165596, 25 ], [ 242577, 31 ], [ 257020, 23 ], [ 265760, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::object-type-dispatch-switch", "conf": 0.93, "crit": 3, "desc": "Switch dispatches on an object type field", "spans": [ [ 285772, 19 ], [ 304039, 18 ] ] }, { "id": "micro-behaviors/data/control-flow/loop::js-length-loop-compound-add", "conf": 0.85, "crit": 3, "desc": "Length-bounded loop uses compound addition", "spans": [ [ 290518, 57 ] ] }, { "id": "micro-behaviors/data/decode/hex::js-parseint-radix-16", "conf": 0.85, "crit": 3, "desc": "JavaScript parseInt with radix 16", "spans": [ [ 142225, 17 ] ] }, { "id": "micro-behaviors/data/decode/url::js-unescape-call-text", "atk": "T1140", "conf": 0.9, "crit": 3, "desc": "Calls JavaScript unescape in source text", "spans": [ [ 311611, 9 ] ] }, { "id": "micro-behaviors/data/embedded/script::embedded-php-command-exec-call", "conf": 0.96, "crit": 3, "desc": "Embedded PHP command execution call", "spans": [ [ 78047, 5 ] ] }, { "id": "micro-behaviors/data/encode/charcode::charcode-at", "conf": 0.7, "crit": 3, "desc": "charCodeAt() method call", "spans": [ [ 115722, 12 ] ] }, { "id": "micro-behaviors/data/encode/charcode::codepoint-at", "conf": 0.7, "crit": 3, "desc": "codePointAt() method call", "spans": [ [ 110347, 13 ] ] }, { "id": "micro-behaviors/data/serialize/binary::buffer-slice-call-name", "conf": 0.9, "crit": 1, "desc": "slice method call name", "spans": [ [ 42610, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 49561, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::command-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object command field", "spans": [ [ 35789, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::result-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object result field", "spans": [ [ 68730, 0 ] ] }, { "id": "micro-behaviors/data/source/arithmetic::lsb-bit-mask-source", "conf": 1.0, "crit": 3, "desc": "Source contains low-bit mask syntax", "spans": [ [ 1119, 3 ], [ 82347, 4 ], [ 186216, 4 ], [ 230729, 3 ] ] }, { "id": "micro-behaviors/data/source/arithmetic::source-xor-operation", "conf": 1.0, "crit": 3, "desc": "Source references XOR syntax", "spans": [ [ 319730, 3 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 79451, 10 ], [ 81887, 10 ], [ 81920, 11 ], [ 92875, 9 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.72, "crit": 3, "desc": "Sorts a JavaScript array", "spans": [ [ 186225, 6 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read", "conf": 0.8, "crit": 2, "desc": "Reads an array element into a variable", "spans": [ [ 30575, 0 ] ] }, { "id": "micro-behaviors/data/source/syntax/assignment::nested-call-assignment", "conf": 0.85, "crit": 3, "desc": "Nested function call assignment target", "spans": [ [ 182823, 37 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1882, 8 ] ] }, { "id": "micro-behaviors/data/string/replace::keyed-replacement-call", "conf": 0.96, "crit": 3, "desc": "Replaces text using a keyed replacement table", "spans": [ [ 76462, 14 ], [ 76480, 14 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-js-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of JavaScript regex patterns", "spans": [ [ 82323, 11 ] ] }, { "id": "micro-behaviors/fs/delete/directory::source-directory-delete-target", "conf": 0.9, "crit": 3, "desc": "Delete command directly targets src", "spans": [ [ 361219, 83 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-4", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 1, "desc": "SCHEMA identifier (config name)", "spans": [ [ 366284, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/syntax::js-split-custom-delimiter", "conf": 0.8, "crit": 3, "desc": "Split with custom delimiter", "spans": [ [ 378025, 11 ] ] }, { "id": "objectives/supply-chain/hidden-payload/extensions/session::management-id-comparison--rx-8", "conf": 0.9, "crit": 3, "desc": ".indexOf() call against extension/id ID", "spans": [ [ 257024, 19 ] ] }, { "id": "well-known/app/browser/google-web::google-llc-copyright", "conf": 0.95, "crit": 3, "desc": "Google LLC copyright marker", "spans": [ [ 783, 20 ] ] }, { "id": "metadata/build/minifier::js-large-minified-bundle", "conf": 0.92, "crit": 2, "desc": "Large minified JavaScript bundle", "spans": [ [ 0, 405701 ] ] }, { "id": "metadata/build/minifier::js-medium-minified-line", "conf": 0.9, "crit": 2, "desc": "JavaScript contains a long minified line", "spans": [ [ 0, 405701 ] ] }, { "id": "metadata/file/naming::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/lang/javascript-features::arrow-function", "conf": 0.9, "crit": 2, "desc": "ES6 arrow function syntax", "spans": [ [ 62389, 0 ] ] }, { "id": "metadata/lang/javascript-features::const-let", "conf": 0.9, "crit": 2, "desc": "ES6 const/let declarations", "spans": [ [ 263, 0 ] ] }, { "id": "metadata/lang/javascript-features::spread-operator", "conf": 0.9, "crit": 2, "desc": "ES6 spread operator (in array/object context)", "spans": [ [ 45175, 0 ] ] }, { "id": "metadata/lang/javascript-features::template-literal", "conf": 0.9, "crit": 2, "desc": "ES6 template literal syntax", "spans": [ [ 1257, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "spans": [ [ 938, 18 ] ] }, { "id": "micro-behaviors/ui/window/dom/create::browser-iframe-element", "conf": 0.78, "crit": 1, "desc": "References an iframe HTML element", "spans": [ [ 360805, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/string/fragmentation::js-join-empty-assignment-tail", "conf": 0.97, "crit": 3, "desc": "Variable assigned join('') deobfuscation tail", "spans": [ [ 125323, 22 ] ] }, { "id": "metadata/build/bundler/asset::js-any-bundle-output", "conf": 0.95, "crit": 2, "desc": "Contains bundled or minified JavaScript", "uses": [ 88, 89 ], "spans": [ [ 0, 405701 ] ] } ] } ] } }