4

I was looking through this paper, in which they use HTMLUnit to "measure the number of invocations of JavaScript functions that can be used to define new strings (such as substring, and fromCharCode), and the number of string uses (such as write operations and eval calls)."

I am new to HTMLUnit, and I can't seem to figure out how one can directly see the functions that a website is using and count which ones are substring, eval etc.? How exactly can this be done?

Derek 朕會功夫
  • 92,235
  • 44
  • 185
  • 247
Rehaan Ahmad
  • 794
  • 8
  • 23
  • Hi, from the looks of it they use HTMLUnit as a starting point to develop jsand. HtmlUnit gives you hooking capabilities that you can then write handlers for to gather the metrics they feed into their ML – Ahmed Masud Sep 21 '17 at 00:09
  • In particular you can see all the *\*Handlers* that http://htmlunit.sourceforge.net/apidocs/ supports, and go from there when building your tests – Ahmed Masud Sep 21 '17 at 00:13
  • @AhmedMasud HTMLUnit doesn't seem to have handlers for functions such as eval, they only provide handlers for prompt, alert, refresh, etc – Rehaan Ahmad Oct 09 '17 at 00:39

1 Answers1

1

The easiest approach is to monkeypatch all the native calls. For example:

const original = String.fromCharCode;
String.fromCharCode = function(...args) {
  console.log('creating new string');
  return original.apply(this, args);
}
console.log(String.fromCharCode(65, 66, 67));

This allows you to keep the original functionality while still allowing you to keep track of what's going on. While more complex, the same can be applied (no pun intended) to eval and any other native call.
If you also want to monitor any DOM changes, you can use MutationObservers.

Etheryte
  • 24,589
  • 11
  • 71
  • 116