This release contains the source code of TheThing for version 1.0.1
, among others, supporting:
- identification of DOM Clobbering sources and sinks
- static detection of clobberable data flows
- dynamic forced execution for confirming the clobberability of the sources and data flows