@patrickdk77/script-defuse 0.3.0 → 0.3.1

package/dist/analyze.js

@@ -196,10 +196,10 @@ function analyzeScript(input) {
     declare(program, top);
     // 2. What each binding is given: initializers and assignments. An assignment to a name nothing declares makes a
     // global, unless it is a property of the document, which an AcroForm script's bare names reach.
-    const global = (name) => (!xfa && api_1.DOC_ALL.has(name) ? undefined : top.declare(name));
+    const declareGlobal = (name) => (!xfa && api_1.DOC_ALL.has(name) ? undefined : top.declare(name));
     const assign = (target, expr, scope) => {
         for (const name of patternNames(target)) {
-            const b = scope.lookup(name) ?? global(name);
+            const b = scope.lookup(name) ?? declareGlobal(name);
             if (!b)
                 continue;
             if (expr && target.type === 'Identifier')
@@ -231,11 +231,11 @@ function analyzeScript(input) {
                 assign(n.left, n.right, scope);
             else
                 for (const name of patternNames(n.left))
-                    (scope.lookup(name) ?? global(name))?.kinds.add(n.operator === '+=' ? 'data' : 'number');
+                    (scope.lookup(name) ?? declareGlobal(name))?.kinds.add(n.operator === '+=' ? 'data' : 'number');
         }
         else if ((n.type === 'ForInStatement' || n.type === 'ForOfStatement') && n.left.type !== 'VariableDeclaration' && n.left.type !== 'MemberExpression') {
             for (const name of patternNames(n.left))
-                (scope.lookup(name) ?? global(name))?.kinds.add(n.type === 'ForInStatement' ? 'string' : 'unknown');
+                (scope.lookup(name) ?? declareGlobal(name))?.kinds.add(n.type === 'ForInStatement' ? 'string' : 'unknown');
         }
         else if ((n.type === 'ForInStatement' || n.type === 'ForOfStatement') && n.left.type === 'VariableDeclaration') {
             for (const d of n.left.declarations)
@@ -243,7 +243,7 @@ function analyzeScript(input) {
                     (scope.lookup(name) ?? scope.declare(name)).kinds.add(n.type === 'ForInStatement' ? 'string' : 'unknown');
         }
         else if (n.type === 'UpdateExpression' && n.argument.type === 'Identifier')
-            (scope.lookup(n.argument.name) ?? global(n.argument.name))?.kinds.add('number');
+            (scope.lookup(n.argument.name) ?? declareGlobal(n.argument.name))?.kinds.add('number');
         for (const c of children(n))
             collect(c, inner);
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patrickdk77/script-defuse",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Inspect document scripts: PDF form scripts in JavaScript and FormCalc, from AcroForm and XFA forms, and the VBA modules of Office documents. Keeps a form script only when every call and property it uses formats, checks or calculates form fields, and a macro only when it calls nothing that reaches outside its document. Reports external access, dynamic code and obfuscation. Includes a script plugin for pdf-defuse and office-defuse.",
   "license": "MIT",
   "author": "patrickdk77",