phylum-dev/vuln-reach

Shorthand identifiers are not handled correctly

Opened this issue · 0 comments

JavaScript has a concept of shorthand identifiers in object constructors and patterns, where { foo } is equivalent to { foo: foo }. Those nodes do not have a kind of identifier, but of shorthand_property_identifier or shorthand_property_identifier_pattern.

We currently do not handle those correctly in all cases; their semantics are not trivial, though, and would require some research to figure out correctly.