scriptoriumadmin/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-10-09 03:18:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update strix/skills/custom/validation_methods.md

Browse source 
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
This commit is contained in:
Sandiyo Christan 2026-08-13 01:25:40 +05:30 • committed by GitHub
parent e204a846a2
commit ddb2e0fb48
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
strix/skills/custom/validation_methods.md
View file

@ -48,7 +48,7 @@ Proof: Headless browser confirms onerror fired (e.g., network request to canary
```
Follow-up: create a new object and check if `obj.strix_canary_a1b2c3 === "polluted"`.
**Strength:** Deterministic. If the canary appears, the finding is confirmed.
**Strength:** Deterministic for confirming data flow. Exploitability is confirmed only when the canary demonstrates execution or another concrete security impact.
**Weakness:** Only works for injection/reflection classes where you control input and observe output.
### 2. Heuristic / Differential Validation