codeql icon indicating copy to clipboard operation
codeql copied to clipboard

JS: Do not treat AMD pseudo-dependencies as imports

Open asgerf opened this issue 1 year ago • 0 comments

When an AMD define() call declares exports, module, or require as a dependency, it does not import a module with that name, but we accidentally treated them as imports.

Also removes a spurious recursion pattern in AMD.

Evaluation looks very quiet. Two spurious import edges have been removed. I've seen some more cases in other codebases.

asgerf avatar Feb 29 '24 13:02 asgerf