[stonechoe]

The list of string methods in StringManipulationTaintStep contains trimLeft and trimRight. It does not contain their standard names, trimStart and trimEnd. It also does not contain normalize. All three methods return text from the receiver.

This change adds the three names to the list. They are in alphabetical order. toWellFormed stays at the end of the list, as before.

sink(source().trimStart());        // Before: no flow. After: taint flow.
sink(source().trimEnd());          // Before: no flow. After: taint flow.
sink(source().normalize("NFC"));   // Before: no flow. After: taint flow.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[asgerf]

Thanks for the PR! LGTM