Skip to content

Conversation

@fraxken
Copy link
Member

@fraxken fraxken commented Oct 29, 2022

This PR finalize the implementation of the new NodeSecure VariableTracer class. Two probes already use it:

  • isRequire
  • isWeakCrypto

A lot of code has been removed because the old mechanism was no more useful.

This PR also include a Major (breaking) changes by totally removing the unsafe-assign warning. This one was related to the old mechanism and I think most of the warnings were not relevant in the real world.

Because initial implementation were not capable to catch a lot of situations I added this warning but now the Tracer is quite capable. So I think removing it will greatly help our tools like CI and avoid to match warnings in the UI.

Copy link
Member

@antoine-coulon antoine-coulon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, great stuff :)

Copy link
Member

@tony-go tony-go left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🎉

I'd prefer to see the test I mentioned before we merge this, but it's up to you. 🙌

Thanks for the investment you put into that project. Can't wait to read more about the code in ast-utils.

@fraxken fraxken force-pushed the variable-tracer-final branch from 552af91 to 9fcc1e3 Compare December 23, 2022 20:23
@fraxken fraxken merged commit 8e602c3 into master Jan 1, 2023
@fraxken fraxken deleted the variable-tracer-final branch January 1, 2023 05:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants