The vulnerability documentation explicitly names these four functions as vulnerable entry points. The commit 613079b titled 'Revised escaping functions' in emojione.js indicates the fix involved adding proper sanitization. These functions handle user-controlled emoji conversions to HTML elements, and without input sanitization, could allow script injection. Though we can't view the exact diff, the advisory's specific function list and commit context provide high confidence.