Verification · Code review · Security-focused review
Call-chain investigation
Follow user input from entry point to sink with a model, file by file.
How to build it
- Start from each route or handler that takes user input.
- Follow the input file by file to the sink, such as a query, shell call or file path.
- Report a finding only with a concrete input that reaches the sink.
Signals in a repository
- A script or config that runs vulnhuntr against the web app's entry points.
- Security review comments that cite a call chain from route to sink.
- Test cases with a malicious input for each reported sink.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.