fix init dependencyAutoWarning=false & update docs

NodeSecure · Jan 8, 2024 · ec106f2 · ec106f2
1 parent 9a8165a
commit ec106f2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/docs/unsafe-import.md b/docs/unsafe-import.md
@@ -17,6 +17,7 @@ We analyze and trace several ways to require in Node.js (with CJS):
 - require.main.require
 - require.mainModule.require
 - require.resolve
+- `const XX = eval('require')('XX');` (dangerous import using eval)
 
 ## Example
 

diff --git a/src/SourceFile.js b/src/SourceFile.js
@@ -21,6 +21,7 @@ export class SourceFile {
   inTryStatement = false;
   hasDictionaryString = false;
   hasPrefixedIdentifiers = false;
+  dependencyAutoWarning = false;
   varkinds = { var: 0, let: 0, const: 0 };
   idtypes = { assignExpr: 0, property: 0, variableDeclarator: 0, functionDeclaration: 0 };
   counter = {