eslint-plugin-node-security 4.0.4 → 4.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (77) hide show
  1. package/CHANGELOG.md +27 -0
  2. package/LICENSE +23 -0
  3. package/README.md +58 -47
  4. package/package.json +15 -2
  5. package/src/index.js +16 -2
  6. package/src/index.js.map +1 -1
  7. package/src/oxlint.d.ts +20 -0
  8. package/src/oxlint.js +22 -0
  9. package/src/oxlint.js.map +1 -0
  10. package/src/rules/detect-child-process/index.js +26 -6
  11. package/src/rules/detect-child-process/index.js.map +1 -1
  12. package/src/rules/detect-eval-with-expression/index.js +16 -5
  13. package/src/rules/detect-eval-with-expression/index.js.map +1 -1
  14. package/src/rules/detect-non-literal-fs-filename/index.js +14 -7
  15. package/src/rules/detect-non-literal-fs-filename/index.js.map +1 -1
  16. package/src/rules/detect-suspicious-dependencies/index.js +4 -0
  17. package/src/rules/detect-suspicious-dependencies/index.js.map +1 -1
  18. package/src/rules/lock-file/index.js +25 -9
  19. package/src/rules/lock-file/index.js.map +1 -1
  20. package/src/rules/no-arbitrary-file-access/index.js +5 -2
  21. package/src/rules/no-arbitrary-file-access/index.js.map +1 -1
  22. package/src/rules/no-buffer-overread/index.js +36 -2
  23. package/src/rules/no-buffer-overread/index.js.map +1 -1
  24. package/src/rules/no-cryptojs/index.js +3 -0
  25. package/src/rules/no-cryptojs/index.js.map +1 -1
  26. package/src/rules/no-cryptojs-weak-random/index.js +3 -0
  27. package/src/rules/no-cryptojs-weak-random/index.js.map +1 -1
  28. package/src/rules/no-data-in-temp-storage/index.js +3 -0
  29. package/src/rules/no-data-in-temp-storage/index.js.map +1 -1
  30. package/src/rules/no-deprecated-buffer/index.d.ts +23 -0
  31. package/src/rules/no-deprecated-buffer/index.js +73 -0
  32. package/src/rules/no-deprecated-buffer/index.js.map +1 -0
  33. package/src/rules/no-deprecated-cipher-method/index.js +3 -0
  34. package/src/rules/no-deprecated-cipher-method/index.js.map +1 -1
  35. package/src/rules/no-dynamic-dependency-loading/index.js +3 -0
  36. package/src/rules/no-dynamic-dependency-loading/index.js.map +1 -1
  37. package/src/rules/no-dynamic-require/index.js +6 -1
  38. package/src/rules/no-dynamic-require/index.js.map +1 -1
  39. package/src/rules/no-ecb-mode/index.js +3 -0
  40. package/src/rules/no-ecb-mode/index.js.map +1 -1
  41. package/src/rules/no-insecure-key-derivation/index.js +3 -0
  42. package/src/rules/no-insecure-key-derivation/index.js.map +1 -1
  43. package/src/rules/no-insecure-rsa-padding/index.js +3 -0
  44. package/src/rules/no-insecure-rsa-padding/index.js.map +1 -1
  45. package/src/rules/no-pii-in-logs/index.js +3 -0
  46. package/src/rules/no-pii-in-logs/index.js.map +1 -1
  47. package/src/rules/no-self-signed-certs/index.js +3 -0
  48. package/src/rules/no-self-signed-certs/index.js.map +1 -1
  49. package/src/rules/no-sha1-hash/index.js +3 -0
  50. package/src/rules/no-sha1-hash/index.js.map +1 -1
  51. package/src/rules/no-ssrf/index.js +4 -1
  52. package/src/rules/no-ssrf/index.js.map +1 -1
  53. package/src/rules/no-static-iv/index.js +3 -0
  54. package/src/rules/no-static-iv/index.js.map +1 -1
  55. package/src/rules/no-timing-unsafe-compare/index.js +3 -0
  56. package/src/rules/no-timing-unsafe-compare/index.js.map +1 -1
  57. package/src/rules/no-toctou-vulnerability/index.js +5 -2
  58. package/src/rules/no-toctou-vulnerability/index.js.map +1 -1
  59. package/src/rules/no-unsafe-dynamic-require/index.js +4 -0
  60. package/src/rules/no-unsafe-dynamic-require/index.js.map +1 -1
  61. package/src/rules/no-weak-cipher-algorithm/index.js +3 -0
  62. package/src/rules/no-weak-cipher-algorithm/index.js.map +1 -1
  63. package/src/rules/no-weak-hash-algorithm/index.js +3 -0
  64. package/src/rules/no-weak-hash-algorithm/index.js.map +1 -1
  65. package/src/rules/no-zip-slip/index.js +40 -62
  66. package/src/rules/no-zip-slip/index.js.map +1 -1
  67. package/src/rules/prefer-native-crypto/index.js +3 -0
  68. package/src/rules/prefer-native-crypto/index.js.map +1 -1
  69. package/src/rules/require-dependency-integrity/index.js +3 -0
  70. package/src/rules/require-dependency-integrity/index.js.map +1 -1
  71. package/src/rules/require-secure-credential-storage/index.js +3 -0
  72. package/src/rules/require-secure-credential-storage/index.js.map +1 -1
  73. package/src/rules/require-secure-deletion/index.js +3 -0
  74. package/src/rules/require-secure-deletion/index.js.map +1 -1
  75. package/src/rules/require-storage-encryption/index.js +3 -0
  76. package/src/rules/require-storage-encryption/index.js.map +1 -1
  77. package/src/types/index.js.map +1 -1
package/src/rules/require-storage-encryption/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/eslint-plugin-node-security/src/rules/require-storage-encryption/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH;;;;GAIG;AAEH,4DAAsF;AAUzE,QAAA,wBAAwB,GAAG,IAAA,0BAAU,EAA0B;IAC1E,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EAAE,2CAA2C;SACzD;QACD,QAAQ,EAAE;YACR,iBAAiB,EAAE,IAAA,gCAAgB,EAAC;gBAClC,IAAI,EAAE,4BAAY,CAAC,QAAQ;gBAC3B,SAAS,EAAE,oBAAoB;gBAC/B,GAAG,EAAE,SAAS;gBACd,WAAW,EAAE,iFAAiF;gBAC9F,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,mCAAmC;gBACxC,iBAAiB,EAAE,iDAAiD;aACrE,CAAC;SACH;QACD,MAAM,EAAE,EAAE;KACX;IACD,cAAc,EAAE,EAAE;IAClB,MAAM,CAAC,OAAO;QACZ,OAAO;YAEL,cAAc,CAAC,IAA6B;gBAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;oBACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBAC1C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjE,+BAA+B;oBAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9C,GAAG,CAAC,IAAI,KAAK,gBAAgB;wBAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;wBAChC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACpC,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rules/require-storage-encryption/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH;;;;GAIG;AAEH,4DAAsF;AAUzE,QAAA,wBAAwB,GAAG,IAAA,0BAAU,EAA0B;IAC1E,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,GAAG,EAAE,+HAA+H;YACpI,WAAW,EAAE,2CAA2C;YACxD,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,GAAG;SACV;QACD,QAAQ,EAAE;YACR,iBAAiB,EAAE,IAAA,gCAAgB,EAAC;gBAClC,IAAI,EAAE,4BAAY,CAAC,QAAQ;gBAC3B,SAAS,EAAE,oBAAoB;gBAC/B,GAAG,EAAE,SAAS;gBACd,WAAW,EAAE,iFAAiF;gBAC9F,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,mCAAmC;gBACxC,iBAAiB,EAAE,iDAAiD;aACrE,CAAC;SACH;QACD,MAAM,EAAE,EAAE;KACX;IACD,cAAc,EAAE,EAAE;IAClB,MAAM,CAAC,OAAO;QACZ,OAAO;YAEL,cAAc,CAAC,IAA6B;gBAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;oBACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBAC1C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjE,+BAA+B;oBAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9C,GAAG,CAAC,IAAI,KAAK,gBAAgB;wBAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;wBAChC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACpC,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
package/src/types/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/eslint-plugin-node-security/src/types/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}