CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.12 (changelog, source)
Search

Predicate isBrowserifyBundle

Holds if oe looks like it was produced by Browserify.

Generally, Browserify’s output looks like this:

(function e(t, n, r) {
  // module loader code
}({
  1: [ function(require, module, exports) {
         require("./dep1");
         require("./dep2);
         // ...
       }, { "./dep1": 2, "./dep2": 4, ... } ],
  2: [ function(require, module, exports) {
         // code for module "dep1"
       }, { ... } ],
  3: ...,
  4: [ function(require, module, exports) {
         // code for module "dep2"
       }, { ... } ],
  ...
}, {}, [1]);

Import path

import semmle.javascript.frameworks.Bundling
predicate isBrowserifyBundle(ObjectExpr oe)