SAP/project-foxhound

View on GitHub

A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozilla-firefox/firefox). It can be used to identify insecure data flows or data privacy leaks in client-side web applications.

Stars: 178
Forks: 30
Open beginner issues: 0
Indexed issues: 53

Dominant language: JavaScript
License: GPL-3.0
Last GitHub push: Jul 24, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

53 open issues indexed

Update to Playwright v1.63 Open

chore upstream

Difficulty 5/5 Over a week Newbie friendliness 45/100

SAP/project-foxhound#387 · Opened Sep 7, 2026
Collection of dangerous Coding Patterns Open

bug Incomplete taint propagation

SAP/project-foxhound#386 · 1 comment · 2 assignees · Opened Sep 4, 2026
Foxhound and WPT Open

bug upstream

SAP/project-foxhound#385 · 1 comment · 1 assignee · Opened Sep 1, 2026
"Flaky" escape Test Open

bug javascript

SAP/project-foxhound#384 · 1 comment · 2 assignees · Opened Aug 30, 2026
Reading `innerHTML` causes several internal operations Open

bug

SAP/project-foxhound#382 · 1 assignee · Opened Jul 27, 2026
Taint through Trusted Types Open

enhancement

SAP/project-foxhound#379 · 1 assignee · Opened Jul 24, 2026
URL.search does not always propagate taints Open

bug

SAP/project-foxhound#373 · 1 assignee · Opened Jun 29, 2026
RegExp.prototype.exec loses flags Open

bug Incomplete taint propagation

SAP/project-foxhound#371 · 1 comment · 1 assignee · Opened Jun 26, 2026
Error: Blank website "JavaScript is required to sign in." + "User-Agent string appears to be from an automated process" Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#370 · 3 comments · Opened Jun 17, 2026
Windows installer not produced by mach package Open

github

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

SAP/project-foxhound#369 · Opened Jun 15, 2026
Add new sinks from SanitizerAPI Open

enhancement

SAP/project-foxhound#367 · 1 assignee · Opened May 19, 2026
Keep preferences in sync with code Open

build enhancement usability

SAP/project-foxhound#366 · 1 assignee · Opened May 17, 2026
Update to Playwright v1.61.0 Open

chore upstream

SAP/project-foxhound#365 · 2 comments · 1 assignee · Opened May 12, 2026
WebAssembly becoming a first class Web Language Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

SAP/project-foxhound#359 · Opened Mar 9, 2026
IndexedDB analysis Open

enhancement

SAP/project-foxhound#352 · 1 comment · 2 assignees · Opened Feb 9, 2026
End-to-End Tainting: Add sinks to the HTML parser Open

end-to-end tainting enhancement

SAP/project-foxhound#329 · 1 assignee · Opened Aug 10, 2025
Missing sources: HashChangeEvent.oldURL and HashChangeEvent.newURL Open

enhancement good first issue

Difficulty 4/5 3-5 days Newbie friendliness 45/100

SAP/project-foxhound#323 · 6 comments · Opened Jul 23, 2025
Template Improvements Open

usability

SAP/project-foxhound#316 · 1 assignee · Opened Jul 2, 2025
End-to-End Tainting and interaction with related sources Open

SAP/project-foxhound#315 · 1 assignee · Opened Jun 20, 2025
Reenable tainted inline script detection Open

end-to-end tainting enhancement

SAP/project-foxhound#313 · 1 assignee · Opened Jun 17, 2025
Invalid logic during process shutdown Open

bug

SAP/project-foxhound#312 · 1 assignee · Opened Jun 12, 2025
Reenabling Debug Mode Open

Debug Mode

SAP/project-foxhound#311 · 1 assignee · Opened Jun 12, 2025
Debug Mode causes Assertion failures for Preference Access Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#309 · 2 comments · Opened Jun 11, 2025
Test Report Erroring Out Open

github

SAP/project-foxhound#306 · 1 assignee · Opened Jun 6, 2025
XMLHttp.response source detection depends on sink Open

bug Incomplete taint propagation

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#294 · 11 comments · Opened May 25, 2025
Add fetch.header sink Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

SAP/project-foxhound#292 · 6 comments · Opened May 25, 2025
Test Sinks: Button onclick Open

bug

SAP/project-foxhound#284 · 2 assignees · Opened Mar 31, 2025
Enhance Taint Report Open

enhancement

SAP/project-foxhound#281 · 1 assignee · Opened Mar 27, 2025
View Taint Flows in Foxhound Open

enhancement usability

SAP/project-foxhound#268 · 9 comments · 1 assignee · Opened Mar 17, 2025
Add Tainting Tests to GitHub Open

enhancement github

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#266 · 2 comments · Opened Mar 13, 2025
Sources not under user control Open

enhancement

SAP/project-foxhound#265 · 4 comments · 1 assignee · Opened Mar 12, 2025
Document Taint and TaintReport types Open

documentation

SAP/project-foxhound#264 · 3 comments · 1 assignee · Opened Mar 12, 2025
FAILED: Repository Linter Issue: rl-assigned_teams Open

SAP/project-foxhound#261 · 1 assignee · Opened Feb 15, 2025
Clear up URL encoding flags Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

SAP/project-foxhound#260 · Opened Feb 14, 2025
Change JS_EncodeStringToUTF8 to JS_EncodeStringToLatin1 Open

bug good first issue

Difficulty 4/5 3-5 days Newbie friendliness 38/100

SAP/project-foxhound#255 · Opened Jan 29, 2025
Switch to Custom VM Images for Github Actions Open

github good first issue

Difficulty 5/5 Over a week Newbie friendliness 25/100

SAP/project-foxhound#254 · 2 comments · Opened Jan 27, 2025
Clean up Tainting Utility functions Open

enhancement good first issue help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#243 · Opened Dec 20, 2024
Add option to apply patch when running `build.sh` Open

build.sh enhancement good first issue

SAP/project-foxhound#241 · 1 assignee · Opened Nov 29, 2024
Strict Equality not working properly with tainted values Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#239 · 4 comments · Opened Nov 28, 2024
Overhead if tainting is disabled Open

enhancement performance

SAP/project-foxhound#235 · 1 reaction · 1 assignee · Opened Nov 22, 2024
Copying tainted numbers does not propagate taint Open

bug primitaint

SAP/project-foxhound#219 · 1 assignee · Opened Aug 15, 2024
Sending tainted number via postmessage leaves them in 'zombie state' Open

bug primitaint

SAP/project-foxhound#218 · 1 assignee · Opened Aug 13, 2024
NS_ERROR_XPC_BAD_CONVERT_NATIVE: Could not convert Native argument arg 1 [nsIWindowMediator.getOuterWindowWithId] Open

bug playwright

SAP/project-foxhound#217 · 1 comment · 1 assignee · Opened Jul 31, 2024
Conditions involving tainted primitives Open

bug enhancement primitaint

SAP/project-foxhound#216 · 1 comment · 2 assignees · Opened Jul 31, 2024
Tainting Uint8Array Open

bug primitaint

Difficulty 4/5 3-5 days Newbie friendliness 42/100

SAP/project-foxhound#215 · Opened Jun 18, 2024
element.before/element.after doesn't consider all possible tainted strings Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#202 · Opened Feb 20, 2024
Add Extension API to view source in debugger Open

enhancement upstream

Difficulty 5/5 Over a week Newbie friendliness 35/100

SAP/project-foxhound#201 · 1 comment · Opened Feb 19, 2024
Inlining Tainting Checks Open

enhancement good first issue performance

Difficulty 4/5 3-5 days Newbie friendliness 35/100

SAP/project-foxhound#196 · Opened Jan 31, 2024
Cannot launch Foxhound 114.0.2 with Playwright 1.37 Open

playwright

SAP/project-foxhound#179 · 1 assignee · Opened Nov 6, 2023
Special Characters in xUnit Report Open

bug upstream

SAP/project-foxhound#175 · 1 assignee · Opened Aug 9, 2023

SAP/project-foxhound

Get new issues in your inbox