phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

Home Page:https://phylum.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Fix variable declaration access graphs

cd-work opened this issue · comments

Currently the calculated access graph does not create an edge between a variable declaration and the value it has been assigned.

var test = foo;

In the above example, an edge should be created marking test as an accessor of foo.

There are already two tests for this which are currently ignored:

javascript::lang::accesses::tests::leaked_renamed_function
javascript::lang::accesses::tests::parenthesized_variable