Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications

The repository of our work is organized in the following way:

• PHP:

  • Testability Patterns: details each single testability pattern together with its SAST measurement, discovery rule, prevalence (if any), and transformations.
  • Extra testability patterns: additional testability tarpits (ongoing).
  • Opcode: our own documentation for the PHP opcodes used for our patterns investigation.
  • Discovery rules for patterns - CPG Queries: scala queries for tarpits library.
  • Projects: List of projects in our Dataset.
  • Manual Transformations - real cases: contains the detailed explanations of PHP case studies for our manual experiments.
  • Automated transformations - large scale experiment: sums up the large scale evaluation with tables.

• JS:

  • Testability Patterns: details each single testability pattern together with its SAST measurement, discovery rule, prevalence (if any), and transformations.
  • Manual Transformations - real cases: contains the detailed explanations of JS case studies for our manual experiments.

• [Docs]

  • ADD New Tarpit

• [CVEs]

  • Published CVEs