JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.

Download JSFlow v1.2

JSFLow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow written in TypeScript. JSFlow

  • supports full non-strict ECMA-262 v.5 including the standard API,
  • provides dynamic (runtime) tracking and verification of security labels,
  • can be compiled to JavaScript, which enables flexibility in the deployment of JSFlow.

We invite you to try the console, or tackle the challenge.

Contributors

JSFlow is developed by Andrei Sabelfeld's research group at the Department of Computer Science and Engineering, Chalmers University of Technology, Gothenburg, Sweden and Daniel Hedin, Mälardalen University, Västerås, Sweden.

Past contributors
  • Luciano Bello
  • Arnar Birgisson
Acknowledgments

This work has been partly funded by the European Community under the ProSecuToR, WebSand, and FlowShield projects and the Swedish Foundation for Strategic Research (SSF) under the WebSec project.