Skip to content

Detects "require(variable)", which might allow an attacker to load and run arbitrary code, or access arbitrary files on disk (security/detect-non-literal-require)

⚠️ This rule warns in the ✅ recommended config.

More information: Where does Node.js and require look for modules?

Released under the Apache License 2.0.