diff --git a/docs/unsafe-import.md b/docs/unsafe-import.md index 1afa365..ef6923d 100644 --- a/docs/unsafe-import.md +++ b/docs/unsafe-import.md @@ -17,6 +17,7 @@ We analyze and trace several ways to require in Node.js (with CJS): - require.main.require - require.mainModule.require - require.resolve +- `const XX = eval('require')('XX');` (dangerous import using eval) ## Example diff --git a/src/SourceFile.js b/src/SourceFile.js index 0e3013b..5f93cf7 100644 --- a/src/SourceFile.js +++ b/src/SourceFile.js @@ -21,6 +21,7 @@ export class SourceFile { inTryStatement = false; hasDictionaryString = false; hasPrefixedIdentifiers = false; + dependencyAutoWarning = false; varkinds = { var: 0, let: 0, const: 0 }; idtypes = { assignExpr: 0, property: 0, variableDeclarator: 0, functionDeclaration: 0 }; counter = {