Skip to content

JavaScript: Add support for import() syntax from ECMAScript 2020 (dynamic import) #23083

Open

Description

@ebickle

Description of the issue

CodeQL doesn't appear to support the dynamic import (import()) feature from ECMAScript 2020.

In this example, taint doesn't flow through the await import:

export const run = async (request) => {
  const { handle } = await import("./handle.js");
  return handle(request);
};

Sample source code here:
dynamic-import-sample.zip

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions