Kaoru0822 502528c58d fix(javascript): resolve HTML script URLs after URL whitespace and percent decoding ...

An HTML script src or base href with percent-encoded letters or
surrounding whitespace was looked up literally, so an inventoried script
was reported as not-found. Apply HTML attribute and URL parser
whitespace handling, then percent-decode the path as the URL standard
does. Encoded dot and separator bytes are still rejected, and paths that
decode to NUL or non-UTF-8 bytes are rejected explicitly.

Closes #1236

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 13:52:55 +00:00

..

.vitepress

docs: simplify the English README and organize guides (#1043)

2026-10-08 11:44:00 +08:00

adr

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

assets

docs: add Discord community links to README

2026-10-05 17:36:29 +08:00

android-analysis.md

fix(android): support owned JADX stdio on Windows (#1276)

2026-10-09 20:34:42 +08:00

apple-application-analysis.md

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

architecture.mermaid

feat(native): inspect recorded crashes through pwntools and pwndbg (#1054)

2026-10-08 16:50:31 +08:00

binary-diagnostics.md

feat(mcp): select views of retained analysis results (#1180)

2026-10-09 12:45:48 +08:00

browser-observation.md

fix(browser): bound script metadata and preserve omissions

2026-10-09 06:32:10 +08:00

browser-scenario-contract.md

feat(browser): capture correlated network content and lifecycle evidence (#797)

2026-10-07 04:35:49 +08:00

capability-migration.md

refactor(artifacts): move inventory and extraction into provider owners (#1032)

2026-10-08 05:51:14 +08:00

cli.md

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

electron-observation.md

fix(capture): retain Electron observations and HAR resource failures

2026-10-09 06:49:02 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

firmware-analysis.md

fix(firmware): reject malformed UTF-8 producer reports

2026-10-09 05:15:23 +08:00

ghidra-dos.md

fix(ghidra): reject address truncation before reads and edits

2026-10-09 03:53:28 +08:00

ghidra-nativeaot.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

ida-provider.md

feat(ida): add read-only GUI and headless MCP providers (#754)

2026-10-07 01:47:05 +08:00

index.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

installation.md

docs(ghidra): explain supported heap and CPU controls (#1278)

2026-10-09 21:20:33 +08:00

javascript-application-graph.md

refactor!: simplify runtime tools and remove replay engines (#572)

2026-10-05 21:15:04 +08:00

javascript-application-workflows.md

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

javascript-artifact-reconstruction.md

fix(javascript): resolve HTML script URLs after URL whitespace and percent decoding

2026-10-09 13:52:55 +00:00

javascript-recovery.md

feat(javascript): recover readable modules with Wakaru (#848)

2026-10-07 12:46:13 +08:00

javascript-runtime-observation.md

fix(inspector): bound retained metadata and preserve cancellation

2026-10-09 05:15:23 +08:00

javascript-runtime-reconciliation.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

managed-code-analysis.md

fix(managed): bind inspection evidence to artifact identity

2026-10-09 05:15:23 +08:00

mcp-contracts.md

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

mcp-prompts.md

feat(mcp): select views of retained analysis results (#1180)

2026-10-09 12:45:48 +08:00

native-investigation.md

chore: merge current main into batch identity fix

2026-10-09 19:13:13 +08:00

process-capture.md

fix(process): preserve unknown filesystem absence in partial captures

2026-10-09 12:09:24 +00:00

provider-evaluation.md

fix(ghidra): admit Linux arm64 with matching native tools

2026-10-09 07:29:15 +08:00

reconstruction-obligation-ledgers.md

refactor: return complete analysis results inline

2026-09-29 08:07:24 +08:00

reconstruction-readiness.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

recorded-crashes.md

feat(native): inspect recorded crashes through pwntools and pwndbg (#1054)

2026-10-08 16:50:31 +08:00

releasing.md

fix(release): publish reviewed release PR merges

2026-10-09 08:44:47 +08:00

roadmap.md

fix(ghidra): admit Linux arm64 with matching native tools

2026-10-09 07:29:15 +08:00

testing.md

fix(android): support owned JADX stdio on Windows (#1276)

2026-10-09 20:34:42 +08:00

tool-design.md

docs: clarify evidence ownership and verification guidance

2026-10-08 23:29:43 +08:00

user-visible-errors.csv

refactor(process): separate capture implementation from analyst workflows (#988)

2026-10-08 00:46:21 +08:00

web-network-captures.md

fix(capture): retain Electron observations and HAR resource failures

2026-10-09 06:49:02 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(browser): validate and bound source-map evidence

2026-10-09 06:32:10 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

windows-ghidra-p0.md

feat(ghidra): support native x86 PE applications on Windows (#1030)

2026-10-08 05:11:47 +08:00