code wiki / (root) / nx_cms_sanitize_probe_gate.nx

nx_cms_sanitize_probe_gate.nx

buildroot/runtime/nx_cms_sanitize_probe_gate.nx

2262 B43 linesdepth 3pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic cms
docsdependenciesstructsconstsfunctions

about

nx_cms_sanitize_probe_gate.nx -- isolates ONE question: what does hs_sanitize DO to the exact payload nx_cms_gate posts? Row 09 said benign <b> did not survive; the renderer is provably correct (keys ending _html emit verbatim) and hs_sanitize's own KATs are 20/20, so the remaining suspect is this specific shape: a stripped <script> IMMEDIATELY followed by an allowed tag. Prints the actual bytes rather than asserting a theory. license_tier: ORIGINAL expect_exit: 0

dependencies 2 imports · 0 importers

nx_gate_verdict.nx nx_html_sanitize.nx nx_cms_sanitize_probe_gate.nx

imports: nx_gate_verdict.nxnx_html_sanitize.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gv_ctr sys_mmap nxa_die sys_write sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ gv_head gv_puts sys_write ↻ hs_sanitize sys_mmap ↻ hs_emitb hs_name_at hs_alpha hs_lc hs_digit hs_lc ↻ hs_emit hs_emitb ↻ hs_find_gt hs_tag_allowed hs_skip_close hs_lc ↻ hs_find_gt ↻ hs_href_extract hs_lc ↻ hs_href_value hs_scheme_ok hs_lc ↻

structs

none

consts

none

functions

9func pr_len(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
called by 1: main
11func main() -> i64