refactor(dynamic): add cross-file route detection for frameworks, enhance test coverage in PHP and Ruby

tests/dynamic_fixtures/class_method/javascript_recursive_deps/benign.js

@@ -0,0 +1,29 @@
+'use strict';
+
+class ShellRunner {
+    run(_command) {
+        return 'safe';
+    }
+}
+
+class UserRepository {
+    constructor(shellRunner) {
+        this.shellRunner = shellRunner;
+    }
+
+    find(input) {
+        return this.shellRunner.run(input);
+    }
+}
+
+class UserService {
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+
+    run(input) {
+        return this.userRepository.find(input);
+    }
+}
+
+module.exports = { UserService, UserRepository, ShellRunner };

tests/dynamic_fixtures/class_method/javascript_recursive_deps/vuln.js

@@ -0,0 +1,30 @@
+'use strict';
+const { execSync } = require('child_process');
+
+class ShellRunner {
+    run(command) {
+        return execSync('true ' + command).toString();
+    }
+}
+
+class UserRepository {
+    constructor(shellRunner) {
+        this.shellRunner = shellRunner;
+    }
+
+    find(input) {
+        return this.shellRunner.run(input);
+    }
+}
+
+class UserService {
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+
+    run(input) {
+        return this.userRepository.find(input);
+    }
+}
+
+module.exports = { UserService, UserRepository, ShellRunner };