@herb-tools/linter 0.8.10 → 0.9.1

package/dist/rules/erb-no-output-control-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-output-control-flow.js","sourceRoot":"","sources":["../../src/rules/erb-no-output-control-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAGjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,MAAM,iCAAkC,SAAQ,eAAe;IAC7D,cAAc,CAAC,IAAe;QAC5B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,gBAAgB,CAAC,IAAiB;QAChC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,eAAe,CAAC,IAAgB;QAC9B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAEO,MAAM,CAAU,mBAAmB,GAA2B;QACpE,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE,MAAM;QAC3B,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,QAAQ;KAChC,CAAA;IAEO,sBAAsB,CAAC,YAAkE;QAC/F,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAM;QACR,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAC,CAAC;YAC3B,MAAM,gBAAgB,GAAG,iCAAiC,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAA;YAEtH,IAAI,CAAC,UAAU,CACb,kCAAkC,gBAAgB,oDAAoD,gBAAgB,oBAAoB,EAC1I,OAAO,CAAC,QAAQ,CACjB,CAAA;QACH,CAAC;IACH,CAAC;;AAGH,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAA;IAE9C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAE7E,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-output-in-attribute-name.js

@@ -0,0 +1,30 @@
+import { ParserRule } from "../types.js";
+import { BaseRuleVisitor } from "./rule-utils.js";
+import { isERBNode, isERBOutputNode } from "@herb-tools/core";
+class ERBNoOutputInAttributeNameVisitor extends BaseRuleVisitor {
+    visitHTMLAttributeNameNode(node) {
+        for (const child of node.children) {
+            if (!isERBNode(child))
+                continue;
+            if (!isERBOutputNode(child))
+                continue;
+            this.addOffense("Avoid ERB output in attribute names. Use static attribute names with dynamic values instead.", child.location);
+        }
+        super.visitHTMLAttributeNameNode(node);
+    }
+}
+export class ERBNoOutputInAttributeNameRule extends ParserRule {
+    static ruleName = "erb-no-output-in-attribute-name";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoOutputInAttributeNameVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-output-in-attribute-name.js.map

package/dist/rules/erb-no-output-in-attribute-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-output-in-attribute-name.js","sourceRoot":"","sources":["../../src/rules/erb-no-output-in-attribute-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAK7D,MAAM,iCAAkC,SAAQ,eAAe;IAC7D,0BAA0B,CAAC,IAA2B;QACpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAErC,IAAI,CAAC,UAAU,CACb,8FAA8F,EAC9F,KAAK,CAAC,QAAQ,CACf,CAAA;QACH,CAAC;QAED,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,UAAU;IAC5D,MAAM,CAAC,QAAQ,GAAG,iCAAiC,CAAA;IAEnD,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC7E,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-output-in-attribute-position.js

@@ -0,0 +1,30 @@
+import { ParserRule } from "../types.js";
+import { BaseRuleVisitor } from "./rule-utils.js";
+import { isERBNode, isERBOutputNode } from "@herb-tools/core";
+class ERBNoOutputInAttributePositionVisitor extends BaseRuleVisitor {
+    visitHTMLOpenTagNode(node) {
+        for (const child of node.children) {
+            if (!isERBNode(child))
+                continue;
+            if (!isERBOutputNode(child))
+                continue;
+            this.addOffense("Avoid `<%= %>` in attribute position. Use `<% if ... %>` with static attributes instead.", child.location);
+        }
+        super.visitHTMLOpenTagNode(node);
+    }
+}
+export class ERBNoOutputInAttributePositionRule extends ParserRule {
+    static ruleName = "erb-no-output-in-attribute-position";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoOutputInAttributePositionVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-output-in-attribute-position.js.map

package/dist/rules/erb-no-output-in-attribute-position.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-output-in-attribute-position.js","sourceRoot":"","sources":["../../src/rules/erb-no-output-in-attribute-position.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAK7D,MAAM,qCAAsC,SAAQ,eAAe;IACjE,oBAAoB,CAAC,IAAqB;QACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAErC,IAAI,CAAC,UAAU,CACb,0FAA0F,EAC1F,KAAK,CAAC,QAAQ,CACf,CAAA;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;CACF;AAED,MAAM,OAAO,kCAAmC,SAAQ,UAAU;IAChE,MAAM,CAAC,QAAQ,GAAG,qCAAqC,CAAA;IAEvD,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,qCAAqC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-raw-output-in-attribute-value.js

@@ -0,0 +1,35 @@
+import { ParserRule } from "../types.js";
+import { AttributeVisitorMixin } from "./rule-utils.js";
+import { isERBNode } from "@herb-tools/core";
+class ERBNoRawOutputInAttributeValueVisitor extends AttributeVisitorMixin {
+    checkStaticAttributeDynamicValue({ valueNodes, attributeNode }) {
+        this.checkValueNodes(valueNodes);
+    }
+    checkDynamicAttributeDynamicValue({ valueNodes }) {
+        this.checkValueNodes(valueNodes);
+    }
+    checkValueNodes(nodes) {
+        for (const node of nodes) {
+            if (!isERBNode(node))
+                continue;
+            if (node.tag_opening?.value === "<%==") {
+                this.addOffense("Avoid `<%==` in attribute values. Use `<%= %>` instead to ensure proper HTML escaping.", node.location);
+            }
+        }
+    }
+}
+export class ERBNoRawOutputInAttributeValueRule extends ParserRule {
+    static ruleName = "erb-no-raw-output-in-attribute-value";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoRawOutputInAttributeValueVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-raw-output-in-attribute-value.js.map

package/dist/rules/erb-no-raw-output-in-attribute-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-raw-output-in-attribute-value.js","sourceRoot":"","sources":["../../src/rules/erb-no-raw-output-in-attribute-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAM5C,MAAM,qCAAsC,SAAQ,qBAAqB;IAC7D,gCAAgC,CAAC,EAAE,UAAU,EAAE,aAAa,EAAqC;QACzG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;IAClC,CAAC;IAES,iCAAiC,CAAC,EAAE,UAAU,EAAsC;QAC5F,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;IAClC,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;gBACvC,IAAI,CAAC,UAAU,CACb,wFAAwF,EACxF,IAAI,CAAC,QAAQ,CACd,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,kCAAmC,SAAQ,UAAU;IAChE,MAAM,CAAC,QAAQ,GAAG,sCAAsC,CAAA;IAExD,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,qCAAqC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-silent-statement.js

@@ -0,0 +1,44 @@
+import { BaseRuleVisitor } from "./rule-utils.js";
+import { ParserRule } from "../types.js";
+import { isERBOutputNode } from "@herb-tools/core";
+function isAssignmentNode(prismNode) {
+    const type = prismNode?.constructor?.name;
+    if (!type)
+        return false;
+    return type.endsWith("WriteNode");
+}
+class ERBNoSilentStatementVisitor extends BaseRuleVisitor {
+    visitERBContentNode(node) {
+        if (isERBOutputNode(node))
+            return;
+        const prismNode = node.prismNode;
+        if (!prismNode)
+            return;
+        if (isAssignmentNode(prismNode))
+            return;
+        const content = node.content?.value?.trim();
+        if (!content)
+            return;
+        this.addOffense(`Avoid using silent ERB tags for statements. Move \`${content}\` to a controller, helper, or presenter.`, node.location);
+    }
+}
+export class ERBNoSilentStatementRule extends ParserRule {
+    static ruleName = "erb-no-silent-statement";
+    get defaultConfig() {
+        return {
+            enabled: false,
+            severity: "warning"
+        };
+    }
+    get parserOptions() {
+        return {
+            prism_nodes: true,
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoSilentStatementVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-silent-statement.js.map

package/dist/rules/erb-no-silent-statement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-silent-statement.js","sourceRoot":"","sources":["../../src/rules/erb-no-silent-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,eAAe,EAAa,MAAM,kBAAkB,CAAA;AAK7D,SAAS,gBAAgB,CAAC,SAAoB;IAC5C,MAAM,IAAI,GAAW,SAAS,EAAE,WAAW,EAAE,IAAI,CAAA;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,2BAA4B,SAAQ,eAAe;IACvD,mBAAmB,CAAC,IAAoB;QACtC,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,OAAM;QAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChC,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAM;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAM;QAEpB,IAAI,CAAC,UAAU,CACb,sDAAsD,OAAO,2CAA2C,EACxG,IAAI,CAAC,QAAQ,CACd,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IACtD,MAAM,CAAC,QAAQ,GAAG,yBAAyB,CAAA;IAE3C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,IAAI,aAAa;QACf,OAAO;YACL,WAAW,EAAE,IAAI;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEvE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/{src/rules → rules}/erb-no-silent-tag-in-attribute-name.js

@@ -16,7 +16,7 @@ class ERBNoSilentTagInAttributeNameVisitor extends BaseRuleVisitor {
     }
 }
 export class ERBNoSilentTagInAttributeNameRule extends ParserRule {
-    name = "erb-no-silent-tag-in-attribute-name";
+    static ruleName = "erb-no-silent-tag-in-attribute-name";
     get defaultConfig() {
         return {
             enabled: true,
@@ -24,7 +24,7 @@ export class ERBNoSilentTagInAttributeNameRule extends ParserRule {
         };
     }
     check(result, context) {
-        const visitor = new ERBNoSilentTagInAttributeNameVisitor(this.name, context);
+        const visitor = new ERBNoSilentTagInAttributeNameVisitor(this.ruleName, context);
         visitor.visit(result.value);
         return visitor.offenses;
     }

package/dist/rules/erb-no-silent-tag-in-attribute-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-silent-tag-in-attribute-name.js","sourceRoot":"","sources":["../../src/rules/erb-no-silent-tag-in-attribute-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAKxD,MAAM,oCAAqC,SAAQ,eAAe;IAChE,0BAA0B,CAAC,IAA2B;QACpD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAExD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CACb,sEAAsE,IAAI,CAAC,WAAW,EAAE,KAAK,sEAAsE,EACnK,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;IACH,CAAC;IAED,kCAAkC;IAC1B,cAAc,CAAC,IAAoB;QACzC,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;QAEvC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;CACF;AAED,MAAM,OAAO,iCAAkC,SAAQ,UAAU;IAC/D,MAAM,CAAC,QAAQ,GAAG,qCAAqC,CAAA;IAEvD,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,oCAAoC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEhF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-statement-in-script.js

@@ -0,0 +1,58 @@
+import { ParserRule } from "../types.js";
+import { BaseRuleVisitor } from "./rule-utils.js";
+import { getTagLocalName, getAttribute, getStaticAttributeValue, isERBNode, isERBOutputNode, isERBCommentNode, isHTMLOpenTagNode, } from "@herb-tools/core";
+const END_PATTERN = /^\s*end\b/;
+class ERBNoStatementInScriptVisitor extends BaseRuleVisitor {
+    visitHTMLElementNode(node) {
+        if (!isHTMLOpenTagNode(node.open_tag)) {
+            super.visitHTMLElementNode(node);
+            return;
+        }
+        if (getTagLocalName(node.open_tag) === "script") {
+            this.checkScriptElement(node);
+        }
+        super.visitHTMLElementNode(node);
+    }
+    checkScriptElement(node) {
+        if (!isHTMLOpenTagNode(node.open_tag))
+            return;
+        const typeAttribute = getAttribute(node.open_tag, "type");
+        const typeValue = typeAttribute ? getStaticAttributeValue(typeAttribute) : null;
+        if (typeValue === "text/html") {
+            return;
+        }
+        if (!node.body || node.body.length === 0) {
+            return;
+        }
+        this.checkNodesForStatements(node.body);
+    }
+    checkNodesForStatements(nodes) {
+        for (const child of nodes) {
+            if (!isERBNode(child))
+                continue;
+            if (isERBOutputNode(child))
+                continue;
+            if (isERBCommentNode(child))
+                continue;
+            const content = child.content?.value || "";
+            if (END_PATTERN.test(content))
+                continue;
+            this.addOffense("Avoid `<% %>` tags inside `<script>`. Use `<%= %>` to interpolate values into JavaScript.", child.location);
+        }
+    }
+}
+export class ERBNoStatementInScriptRule extends ParserRule {
+    static ruleName = "erb-no-statement-in-script";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "warning"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoStatementInScriptVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-statement-in-script.js.map

package/dist/rules/erb-no-statement-in-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-statement-in-script.js","sourceRoot":"","sources":["../../src/rules/erb-no-statement-in-script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EACL,eAAe,EACf,YAAY,EACZ,uBAAuB,EACvB,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AAKzB,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,MAAM,6BAA8B,SAAQ,eAAe;IACzD,oBAAoB,CAAC,IAAqB;QACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;YAChC,OAAM;QACR,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAEO,kBAAkB,CAAC,IAAqB;QAC9C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAM;QAE7C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE/E,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,OAAM;QACR,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC;IAEO,uBAAuB,CAAC,KAAa;QAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAC/B,IAAI,eAAe,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAErC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;YAE1C,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAEvC,IAAI,CAAC,UAAU,CACb,2FAA2F,EAC3F,KAAK,CAAC,QAAQ,CACf,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAA;IAE9C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACzE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-then-in-control-flow.js

@@ -0,0 +1,45 @@
+import { ParserRule } from "../types.js";
+import { BaseRuleVisitor } from "./rule-utils.js";
+class ERBNoThenInControlFlowVisitor extends BaseRuleVisitor {
+    visitERBIfNode(node) {
+        const content = node.content?.value?.trim() ?? "";
+        const keyword = content.startsWith("elsif") ? "elsif" : "if";
+        this.checkThenKeyword(keyword, node.then_keyword);
+        this.visitChildNodes(node);
+    }
+    visitERBUnlessNode(node) {
+        this.checkThenKeyword("unless", node.then_keyword);
+        this.visitChildNodes(node);
+    }
+    visitERBWhenNode(node) {
+        this.checkThenKeyword("when", node.then_keyword);
+        this.visitChildNodes(node);
+    }
+    visitERBInNode(node) {
+        this.checkThenKeyword("in", node.then_keyword);
+        this.visitChildNodes(node);
+    }
+    checkThenKeyword(keyword, thenKeyword) {
+        if (thenKeyword === null)
+            return;
+        this.addOffense(`Avoid using \`then\` in \`${keyword}\` expressions inside ERB templates. Use the multiline block form instead.`, thenKeyword);
+    }
+}
+export class ERBNoThenInControlFlowRule extends ParserRule {
+    static ruleName = "erb-no-then-in-control-flow";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "warning",
+        };
+    }
+    get parserOptions() {
+        return { strict: true };
+    }
+    check(result, context) {
+        const visitor = new ERBNoThenInControlFlowVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-then-in-control-flow.js.map

package/dist/rules/erb-no-then-in-control-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-then-in-control-flow.js","sourceRoot":"","sources":["../../src/rules/erb-no-then-in-control-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAKjD,MAAM,6BAA8B,SAAQ,eAAe;IACzD,cAAc,CAAC,IAAe;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACjD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;QAE5D,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACjD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,gBAAgB,CAAC,IAAiB;QAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,cAAc,CAAC,IAAe;QAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAEO,gBAAgB,CAAC,OAAe,EAAE,WAA4B;QACpE,IAAI,WAAW,KAAK,IAAI;YAAE,OAAM;QAEhC,IAAI,CAAC,UAAU,CACb,6BAA6B,OAAO,4EAA4E,EAChH,WAAW,CACZ,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD,MAAM,CAAC,QAAQ,GAAG,6BAA6B,CAAA;IAE/C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,IAAI,aAAa;QACf,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEzE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-trailing-whitespace.js

@@ -0,0 +1,138 @@
+import { Location, Visitor } from "@herb-tools/core";
+import { ParserRule } from "../types.js";
+import { isHTMLOpenTagNode, isHTMLTextNode, isLiteralNode, getTagLocalName } from "@herb-tools/core";
+import { findNodeAtPosition } from "./rule-utils.js";
+const TRAILING_WHITESPACE = /[ \t\r\v\f\u00A0]+$/;
+const TRAILING_WHITESPACE_BEFORE_NEWLINE = /[ \t\r\v\f\u00A0]+(?=\n)/g;
+const ONLY_WHITESPACE = /^[ \t\r\v\f\u00A0]+$/;
+class SkipZoneCollector extends Visitor {
+    skipZones = [];
+    SKIP_TAGS = new Set(["pre", "textarea", "script", "style"]);
+    visitHTMLElementNode(node) {
+        if (isHTMLOpenTagNode(node.open_tag)) {
+            const tagName = getTagLocalName(node.open_tag);
+            if (tagName && this.SKIP_TAGS.has(tagName)) {
+                this.skipZones.push({
+                    startLine: node.location.start.line,
+                    startColumn: node.location.start.column,
+                    endLine: node.location.end.line,
+                    endColumn: node.location.end.column
+                });
+                return;
+            }
+        }
+        super.visitHTMLElementNode(node);
+    }
+    visitERBNode(node) {
+        if (!node.tag_opening)
+            return;
+        if (!node.tag_closing)
+            return;
+        this.skipZones.push({
+            startLine: node.tag_opening.location.start.line,
+            startColumn: node.tag_opening.location.start.column,
+            endLine: node.tag_closing.location.end.line,
+            endColumn: node.tag_closing.location.end.column
+        });
+    }
+}
+export class ERBNoTrailingWhitespaceRule extends ParserRule {
+    static autocorrectable = true;
+    static ruleName = "erb-no-trailing-whitespace";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error",
+        };
+    }
+    check(result, _context) {
+        const offenses = [];
+        const lines = result.source.split("\n");
+        const candidates = this.findTrailingWhitespaceCandidates(lines);
+        if (candidates.length === 0)
+            return offenses;
+        const skipZones = this.collectSkipZones(result.value);
+        for (const candidate of candidates) {
+            if (!this.isInSkipZone(candidate, skipZones)) {
+                const location = Location.from(candidate.line, candidate.column, candidate.line, candidate.column + candidate.length);
+                const node = findNodeAtPosition(result.value, candidate.line, candidate.column, (n) => isHTMLTextNode(n) || isLiteralNode(n));
+                offenses.push({
+                    rule: this.ruleName,
+                    message: "Extra whitespace detected at end of line.",
+                    location,
+                    autofixContext: node ? { node } : undefined
+                });
+            }
+        }
+        return offenses;
+    }
+    findTrailingWhitespaceCandidates(lines) {
+        const candidates = [];
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const match = line.match(TRAILING_WHITESPACE);
+            if (match && match.index !== undefined) {
+                candidates.push({
+                    line: i + 1,
+                    column: match.index,
+                    length: match[0].length
+                });
+            }
+        }
+        return candidates;
+    }
+    collectSkipZones(root) {
+        const collector = new SkipZoneCollector();
+        collector.visit(root);
+        return collector.skipZones;
+    }
+    isInSkipZone(candidate, skipZones) {
+        for (const zone of skipZones) {
+            if (candidate.line < zone.startLine || candidate.line > zone.endLine)
+                continue;
+            if (candidate.line === zone.endLine && candidate.column >= zone.endColumn)
+                continue;
+            if (candidate.line === zone.startLine && candidate.column < zone.startColumn)
+                continue;
+            return true;
+        }
+        return false;
+    }
+    autofix(offense, result, _context) {
+        if (!offense.autofixContext)
+            return null;
+        const { node } = offense.autofixContext;
+        if (node.type === "AST_HTML_TEXT_NODE" || node.type === "AST_LITERAL_NODE") {
+            let fixedContent = node.content.replace(TRAILING_WHITESPACE_BEFORE_NEWLINE, "");
+            const offenseIsAtEndOfContent = this.isOffenseAtEndOfContent(offense, node);
+            if (offenseIsAtEndOfContent) {
+                if (this.hasTrailingWhitespaceNotIndentation(fixedContent)) {
+                    fixedContent = fixedContent.replace(TRAILING_WHITESPACE, "");
+                }
+                if (ONLY_WHITESPACE.test(fixedContent) && node.location.start.column !== 0) {
+                    fixedContent = "";
+                }
+            }
+            node.content = fixedContent;
+        }
+        return result;
+    }
+    isOffenseAtEndOfContent(offense, node) {
+        return offense.location.end.line === node.location.end.line && offense.location.end.column === node.location.end.column;
+    }
+    hasTrailingWhitespaceNotIndentation(content) {
+        if (content.endsWith("\n"))
+            return false;
+        const endMatch = content.match(TRAILING_WHITESPACE);
+        if (!endMatch)
+            return false;
+        const whitespaceStart = content.length - endMatch[0].length;
+        if (whitespaceStart === 0)
+            return false;
+        const characterBefore = content[whitespaceStart - 1];
+        if (characterBefore === "\n")
+            return false;
+        return true;
+    }
+}
+//# sourceMappingURL=erb-no-trailing-whitespace.js.map

package/dist/rules/erb-no-trailing-whitespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-trailing-whitespace.js","sourceRoot":"","sources":["../../src/rules/erb-no-trailing-whitespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,UAAU,EAA+B,MAAM,aAAa,CAAA;AAErE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAKpD,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AACjD,MAAM,kCAAkC,GAAG,2BAA2B,CAAA;AACtE,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAmB9C,MAAM,iBAAkB,SAAQ,OAAO;IACrC,SAAS,GAAe,EAAE,CAAA;IAE1B,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;IAE3D,oBAAoB,CAAC,IAAqB;QACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAE9C,IAAI,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;oBACnC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;oBACvC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;oBAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM;iBACpC,CAAC,CAAA;gBAEF,OAAM;YACR,CAAC;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAED,YAAY,CAAC,IAAa;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAM;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAM;QAE7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YAC/C,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;YACnD,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;YAC3C,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM;SAChD,CAAC,CAAA;IACJ,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,UAAiD;IAChG,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;IAC7B,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAA;IAE9C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,QAA+B;QACxD,MAAM,QAAQ,GAAgE,EAAE,CAAA;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAA;QAE/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAA;QAE5C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAErD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;gBACrH,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAsC,CAAA;gBAElK,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,OAAO,EAAE,2CAA2C;oBACpD,QAAQ;oBACR,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC5C,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,gCAAgC,CAAC,KAAe;QACtD,MAAM,UAAU,GAAkC,EAAE,CAAA;QAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;YAE7C,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;iBACxB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAA;IACnB,CAAC;IAEO,gBAAgB,CAAC,IAAkB;QACzC,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAA;QAEzC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,OAAO,SAAS,CAAC,SAAS,CAAA;IAC5B,CAAC;IAEO,YAAY,CAAC,SAAsC,EAAE,SAAqB;QAChF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;gBAAE,SAAQ;YAC9E,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAQ;YACnF,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAEtF,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,CAAC,OAA2D,EAAE,MAAmB,EAAE,QAA+B;QACvH,IAAI,CAAC,OAAO,CAAC,cAAc;YAAE,OAAO,IAAI,CAAA;QAExC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,cAAc,CAAA;QAEvC,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3E,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAA;YAC/E,MAAM,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAE3E,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,mCAAmC,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3D,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBAED,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3E,YAAY,GAAG,EAAE,CAAA;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,YAAY,CAAA;QAC7B,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,uBAAuB,CAAC,OAA2D,EAAE,IAAkD;QAC7I,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAA;IACzH,CAAC;IAEO,mCAAmC,CAAC,OAAe;QACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACnD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAA;QAE3B,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC3D,IAAI,eAAe,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAEvC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAE1C,OAAO,IAAI,CAAA;IACb,CAAC"}

package/dist/rules/erb-no-unsafe-js-attribute.js

@@ -0,0 +1,36 @@
+import { ParserRule } from "../types.js";
+import { AttributeVisitorMixin } from "./rule-utils.js";
+import { isERBNode, isERBOutputNode } from "@herb-tools/core";
+const JS_ATTRIBUTE_PATTERN = /^on/i;
+const SAFE_PATTERN = /\.to_json\s*$|\bj\s*[\s(]|\bescape_javascript\s*[\s(]/;
+class ERBNoUnsafeJSAttributeVisitor extends AttributeVisitorMixin {
+    checkStaticAttributeDynamicValue({ attributeName, valueNodes }) {
+        if (!JS_ATTRIBUTE_PATTERN.test(attributeName))
+            return;
+        for (const node of valueNodes) {
+            if (!isERBNode(node))
+                continue;
+            if (!isERBOutputNode(node))
+                continue;
+            const content = node.content?.value?.trim() || "";
+            if (SAFE_PATTERN.test(content))
+                continue;
+            this.addOffense(`Unsafe ERB output in \`${attributeName}\` attribute. Use \`.to_json\`, \`j()\`, or \`escape_javascript()\` to safely encode values.`, node.location);
+        }
+    }
+}
+export class ERBNoUnsafeJSAttributeRule extends ParserRule {
+    static ruleName = "erb-no-unsafe-js-attribute";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoUnsafeJSAttributeVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-unsafe-js-attribute.js.map

package/dist/rules/erb-no-unsafe-js-attribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-unsafe-js-attribute.js","sourceRoot":"","sources":["../../src/rules/erb-no-unsafe-js-attribute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAM7D,MAAM,oBAAoB,GAAG,MAAM,CAAA;AACnC,MAAM,YAAY,GAAG,uDAAuD,CAAA;AAE5E,MAAM,6BAA8B,SAAQ,qBAAqB;IACrD,gCAAgC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAqC;QACzG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAM;QAErD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEjD,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAExC,IAAI,CAAC,UAAU,CACb,0BAA0B,aAAa,8FAA8F,EACrI,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAA;IAE9C,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACzE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}

package/dist/rules/erb-no-unsafe-raw.js

@@ -0,0 +1,63 @@
+import { ParserRule } from "../types.js";
+import { BaseRuleVisitor } from "./rule-utils.js";
+import { isERBOutputNode, getTagLocalName, isHTMLOpenTagNode } from "@herb-tools/core";
+const RAW_PATTERN = /\braw[\s(]/;
+const HTML_SAFE_PATTERN = /\.html_safe\b/;
+const RAW_TEXT_ELEMENTS = new Set([
+    "title",
+    "textarea",
+    "script",
+    "style",
+    "xmp",
+    "iframe",
+    "noembed",
+    "noframes",
+    "listing",
+    "plaintext",
+]);
+class ERBNoUnsafeRawVisitor extends BaseRuleVisitor {
+    insideRawTextElement = false;
+    visitHTMLElementNode(node) {
+        if (!isHTMLOpenTagNode(node.open_tag)) {
+            super.visitHTMLElementNode(node);
+            return;
+        }
+        const tagName = getTagLocalName(node.open_tag);
+        if (tagName && RAW_TEXT_ELEMENTS.has(tagName)) {
+            const wasInside = this.insideRawTextElement;
+            this.insideRawTextElement = true;
+            super.visitHTMLElementNode(node);
+            this.insideRawTextElement = wasInside;
+            return;
+        }
+        super.visitHTMLElementNode(node);
+    }
+    visitERBContentNode(node) {
+        if (this.insideRawTextElement)
+            return;
+        if (!isERBOutputNode(node))
+            return;
+        const content = node.content?.value || "";
+        if (RAW_PATTERN.test(content)) {
+            this.addOffense("Avoid `raw()` in ERB output. It bypasses HTML escaping and can cause cross-site scripting (XSS) vulnerabilities.", node.location);
+        }
+        if (HTML_SAFE_PATTERN.test(content)) {
+            this.addOffense("Avoid `.html_safe` in ERB output. It bypasses HTML escaping and can cause cross-site scripting (XSS) vulnerabilities.", node.location);
+        }
+    }
+}
+export class ERBNoUnsafeRawRule extends ParserRule {
+    static ruleName = "erb-no-unsafe-raw";
+    get defaultConfig() {
+        return {
+            enabled: true,
+            severity: "error"
+        };
+    }
+    check(result, context) {
+        const visitor = new ERBNoUnsafeRawVisitor(this.ruleName, context);
+        visitor.visit(result.value);
+        return visitor.offenses;
+    }
+}
+//# sourceMappingURL=erb-no-unsafe-raw.js.map

package/dist/rules/erb-no-unsafe-raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erb-no-unsafe-raw.js","sourceRoot":"","sources":["../../src/rules/erb-no-unsafe-raw.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAKtF,MAAM,WAAW,GAAG,YAAY,CAAA;AAChC,MAAM,iBAAiB,GAAG,eAAe,CAAA;AAEzC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,qBAAsB,SAAQ,eAAe;IACzC,oBAAoB,GAAG,KAAK,CAAA;IAEpC,oBAAoB,CAAC,IAAqB;QACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;YAChC,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE9C,IAAI,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAA;YAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YAChC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;YAChC,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAA;YACrC,OAAM;QACR,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAED,mBAAmB,CAAC,IAAoB;QACtC,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAM;QACrC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAM;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;QAEzC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CACb,kHAAkH,EAClH,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;QAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CACb,uHAAuH,EACvH,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,UAAU;IAChD,MAAM,CAAC,QAAQ,GAAG,mBAAmB,CAAA;IAErC,IAAI,aAAa;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAmB,EAAE,OAA8B;QACvD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC"}