@produtype/core 1.18.0 → 1.19.0

package/dist/utils/textSearch.js

@@ -26,6 +26,26 @@ const blockComments_1 = require("../analyzer/blockComments");
  * and is left alone.
  */
 const PATTERN_DECLARATION = /^(?:const\s+\w+(?:\s*:[^=]+)?\s*=\s*)?\/(?:[^/\\]|\\.)+\/[gimsuy]*\s*[,;]?$/;
+/**
+ * A header name on a line of its own says which header, not what value.
+ *
+ * saleor's ASGI handler writes the response headers as a list of tuples, so
+ * `b"access-control-allow-origin",` sits alone on line 50 and the origin it will
+ * carry is on line 51. Saleor only appends that pair when the caller's origin matched
+ * its allowlist, and answers 400 when it did not — a strict policy, reported at
+ * `high` as one with no restrictions, on the strength of a line that cannot show a
+ * policy because there is no value on it.
+ *
+ * The bare-string-in-a-list rule this file already records stays intact:
+ * `'django.contrib.auth',` in an INSTALLED_APPS array *is* the behaviour. A header
+ * name is not, for the reason above — it names the slot, and the slot is filled
+ * somewhere else.
+ */
+const LONE_HEADER_NAME = /^[bru]?(['"`])([^'"`]+)\1\s*,?$/i;
+function isALoneHeaderName(trimmed) {
+    const literal = LONE_HEADER_NAME.exec(trimmed);
+    return literal !== null && HTTP_HEADER_NAME.test(literal[2].replace(/\b[a-z]/g, (c) => c.toUpperCase()));
+}
 /**
  * An entry that says what something is called.
  *
@@ -167,7 +187,7 @@ function declaresAType(trimmed) {
 }
 function declaresRatherThanDoes(line) {
     const trimmed = line.trim();
-    return COMMENT_LINE.test(trimmed) || PATTERN_DECLARATION.test(trimmed) || declaresAType(trimmed) || spellsItsOwnName(trimmed) || NAMES_SOMETHING.test(trimmed);
+    return COMMENT_LINE.test(trimmed) || PATTERN_DECLARATION.test(trimmed) || declaresAType(trimmed) || spellsItsOwnName(trimmed) || NAMES_SOMETHING.test(trimmed) || isALoneHeaderName(trimmed);
 }
 /**
  * Whether this line may be quoted back to the reader as something the code does.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@produtype/core",
-  "version": "1.18.0",
+  "version": "1.19.0",
   "description": "Deterministic CLI and library that analyzes a web application repository and reports how far it is from production-ready for the kind of product it is meant to be.",
   "license": "MIT",
   "bin": {