@lvce-editor/eslint-plugin-extension-json 17.3.1

package/dist/index.js

@@ -0,0 +1,114 @@
+import json from '@eslint/json';
+
+const isArrayNode = node => {
+  return node && node.type === 'Array';
+};
+const isObjectNode = node => {
+  return node && node.type === 'Object';
+};
+const isStringNode = node => {
+  return node && node.type === 'String';
+};
+const getMemberName = member => {
+  if (member.name.type === 'String') {
+    return member.name.value;
+  }
+  if (member.name.type === 'Identifier') {
+    return member.name.name;
+  }
+  return undefined;
+};
+const findMember = (node, name) => {
+  if (!isObjectNode(node)) {
+    return undefined;
+  }
+  for (const member of node.members) {
+    if (getMemberName(member) === name) {
+      return member;
+    }
+  }
+  return undefined;
+};
+
+const requiredFirstDirective = "default-src 'none'";
+const meta = {
+  docs: {
+    description: 'Require a secure content security policy for extension workers'
+  },
+  messages: {
+    insecureContentSecurityPolicy: `extension contentSecurityPolicy must start with ${requiredFirstDirective}`,
+    invalidContentSecurityPolicy: 'extension contentSecurityPolicy must be an array of strings',
+    missingContentSecurityPolicy: 'extensions with a main entry must configure contentSecurityPolicy'
+  },
+  type: 'problem'
+};
+const hasMainEntry = manifest => {
+  return Boolean(findMember(manifest, 'browser') || findMember(manifest, 'main'));
+};
+const isValidPolicyArray = node => {
+  return isArrayNode(node) && node.elements.every(element => isStringNode(element.value));
+};
+const create = context => {
+  return {
+    Document(node) {
+      if (!isObjectNode(node.body)) {
+        return;
+      }
+      const contentSecurityPolicy = findMember(node.body, 'contentSecurityPolicy');
+      if (!contentSecurityPolicy) {
+        if (hasMainEntry(node.body)) {
+          context.report({
+            loc: node.body.loc,
+            messageId: 'missingContentSecurityPolicy'
+          });
+        }
+        return;
+      }
+      if (!isValidPolicyArray(contentSecurityPolicy.value)) {
+        context.report({
+          loc: contentSecurityPolicy.name.loc,
+          messageId: 'invalidContentSecurityPolicy'
+        });
+        return;
+      }
+      const [firstDirective] = contentSecurityPolicy.value.elements;
+      if (!firstDirective || firstDirective.value.value !== requiredFirstDirective) {
+        context.report({
+          loc: contentSecurityPolicy.name.loc,
+          messageId: 'insecureContentSecurityPolicy'
+        });
+      }
+    }
+  };
+};
+
+const contentSecurityPolicy = {
+  __proto__: null,
+  create,
+  meta
+};
+
+const plugin = {
+  configs: {},
+  meta: {
+    name: 'extension-json',
+    version: '0.0.1'
+  },
+  rules: {
+    'content-security-policy': contentSecurityPolicy
+  }
+};
+const recommended = [{
+  files: ['**/extension.json'],
+  language: 'json/json',
+  plugins: {
+    'extension-json': plugin,
+    // @ts-ignore
+    json
+  },
+  rules: {
+    'extension-json/content-security-policy': 'error'
+  }
+}];
+
+export { recommended as default };

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@lvce-editor/eslint-plugin-extension-json",
+  "version": "17.3.1",
+  "main": "dist/index.js",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lvce-editor/eslint-config.git"
+  },
+  "type": "module",
+  "license": "MIT",
+  "description": "ESLint rules for LVCE extension manifests.",
+  "dependencies": {
+    "@eslint/json": "2.0.1"
+  }
+}