Access to DOM implementation in Webkit/Chromium

[sqrt...@googlemail.com]

Hi guys,

I'm working on a project where I want to achieve taint tracking in Chromium. In essence, I want to be able to identify things coming from the DOM, what might happen to them (concat, substring, etc) and be able to identify variables derived from them. My question in a nutshell is: how and where are calls to the DOM implemented? I gather that v8 is provided a context from the rendering engine and then works on that - couldn't find the corresponding code though.

Your help is very much appreciated

 Ben

[Jakob Kummerow]

The DOM bindings for V8 are part of WebKit, not part of V8. Start looking here: http://trac.webkit.org/browser/trunk/Source/WebCore/bindings/v8

[sqrt...@googlemail.com]

I found out this much as well. Thanks for the quick reply though :)

[Hossein Siadati]

Did you find the answer of this?
Similar to what you are trying to do, I would like to intercept all access to DOM elements of the page.
I guess that should be possible in v8, but don't know how.

Thanks!