a day ago
- JavaScript exception handling can be exploited to create non-linear code flow that confuses analysis.
- Attackers can force errors in try blocks to jump to catch blocks, hiding the actual intended functionality.
- The catch block executes real logic, often with conditional checks based on state set in the try block.
- Chaining multiple try-catch blocks creates complex execution paths that only reach specific code through specific error chains.
- It is important to avoid making it obvious that the function always throws an error, as that makes the pattern easier to detect.