eslint-plugin-sdl-2 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5316 -0
- package/LICENSE +21 -0
- package/README.md +133 -0
- package/dist/_internal/ast-utils.d.ts +17 -0
- package/dist/_internal/ast-utils.d.ts.map +1 -0
- package/dist/_internal/ast-utils.js +93 -0
- package/dist/_internal/ast-utils.js.map +1 -0
- package/dist/_internal/config-references.d.ts +5 -0
- package/dist/_internal/config-references.d.ts.map +1 -0
- package/dist/_internal/config-references.js +13 -0
- package/dist/_internal/config-references.js.map +1 -0
- package/dist/_internal/create-rule.d.ts +9 -0
- package/dist/_internal/create-rule.d.ts.map +1 -0
- package/dist/_internal/create-rule.js +6 -0
- package/dist/_internal/create-rule.js.map +1 -0
- package/dist/_internal/domparser.d.ts +19 -0
- package/dist/_internal/domparser.d.ts.map +1 -0
- package/dist/_internal/domparser.js +45 -0
- package/dist/_internal/domparser.js.map +1 -0
- package/dist/_internal/electron-web-preferences.d.ts +14 -0
- package/dist/_internal/electron-web-preferences.d.ts.map +1 -0
- package/dist/_internal/electron-web-preferences.js +63 -0
- package/dist/_internal/electron-web-preferences.js.map +1 -0
- package/dist/_internal/estree-utils.d.ts +51 -0
- package/dist/_internal/estree-utils.d.ts.map +1 -0
- package/dist/_internal/estree-utils.js +112 -0
- package/dist/_internal/estree-utils.js.map +1 -0
- package/dist/_internal/node-tls-config.d.ts +44 -0
- package/dist/_internal/node-tls-config.d.ts.map +1 -0
- package/dist/_internal/node-tls-config.js +101 -0
- package/dist/_internal/node-tls-config.js.map +1 -0
- package/dist/_internal/rules-registry.d.ts +10 -0
- package/dist/_internal/rules-registry.d.ts.map +1 -0
- package/dist/_internal/rules-registry.js +148 -0
- package/dist/_internal/rules-registry.js.map +1 -0
- package/dist/_internal/script-element.d.ts +7 -0
- package/dist/_internal/script-element.d.ts.map +1 -0
- package/dist/_internal/script-element.js +46 -0
- package/dist/_internal/script-element.js.map +1 -0
- package/dist/_internal/worker-code-loading.d.ts +69 -0
- package/dist/_internal/worker-code-loading.d.ts.map +1 -0
- package/dist/_internal/worker-code-loading.js +134 -0
- package/dist/_internal/worker-code-loading.js.map +1 -0
- package/dist/plugin.cjs +6036 -0
- package/dist/plugin.cjs.map +7 -0
- package/dist/plugin.d.cts +11 -0
- package/dist/plugin.d.ts +11 -0
- package/dist/plugin.d.ts.map +1 -0
- package/dist/plugin.js +235 -0
- package/dist/plugin.js.map +1 -0
- package/dist/rules/no-angular-bypass-sanitizer.d.ts +5 -0
- package/dist/rules/no-angular-bypass-sanitizer.d.ts.map +1 -0
- package/dist/rules/no-angular-bypass-sanitizer.js +32 -0
- package/dist/rules/no-angular-bypass-sanitizer.js.map +1 -0
- package/dist/rules/no-angular-bypass-security-trust-html.d.ts +5 -0
- package/dist/rules/no-angular-bypass-security-trust-html.d.ts.map +1 -0
- package/dist/rules/no-angular-bypass-security-trust-html.js +51 -0
- package/dist/rules/no-angular-bypass-security-trust-html.js.map +1 -0
- package/dist/rules/no-angular-innerhtml-binding.d.ts +5 -0
- package/dist/rules/no-angular-innerhtml-binding.d.ts.map +1 -0
- package/dist/rules/no-angular-innerhtml-binding.js +57 -0
- package/dist/rules/no-angular-innerhtml-binding.js.map +1 -0
- package/dist/rules/no-angular-sanitization-trusted-urls.d.ts +5 -0
- package/dist/rules/no-angular-sanitization-trusted-urls.d.ts.map +1 -0
- package/dist/rules/no-angular-sanitization-trusted-urls.js +32 -0
- package/dist/rules/no-angular-sanitization-trusted-urls.js.map +1 -0
- package/dist/rules/no-angularjs-bypass-sce.d.ts +5 -0
- package/dist/rules/no-angularjs-bypass-sce.d.ts.map +1 -0
- package/dist/rules/no-angularjs-bypass-sce.js +80 -0
- package/dist/rules/no-angularjs-bypass-sce.js.map +1 -0
- package/dist/rules/no-angularjs-enable-svg.d.ts +5 -0
- package/dist/rules/no-angularjs-enable-svg.d.ts.map +1 -0
- package/dist/rules/no-angularjs-enable-svg.js +48 -0
- package/dist/rules/no-angularjs-enable-svg.js.map +1 -0
- package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.d.ts +5 -0
- package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.d.ts.map +1 -0
- package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.js +64 -0
- package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.js.map +1 -0
- package/dist/rules/no-angularjs-sanitization-whitelist.d.ts +5 -0
- package/dist/rules/no-angularjs-sanitization-whitelist.d.ts.map +1 -0
- package/dist/rules/no-angularjs-sanitization-whitelist.js +32 -0
- package/dist/rules/no-angularjs-sanitization-whitelist.js.map +1 -0
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.d.ts +5 -0
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.d.ts.map +1 -0
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.js +69 -0
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.js.map +1 -0
- package/dist/rules/no-child-process-exec.d.ts +5 -0
- package/dist/rules/no-child-process-exec.d.ts.map +1 -0
- package/dist/rules/no-child-process-exec.js +141 -0
- package/dist/rules/no-child-process-exec.js.map +1 -0
- package/dist/rules/no-child-process-shell-true.d.ts +5 -0
- package/dist/rules/no-child-process-shell-true.d.ts.map +1 -0
- package/dist/rules/no-child-process-shell-true.js +89 -0
- package/dist/rules/no-child-process-shell-true.js.map +1 -0
- package/dist/rules/no-cookies.d.ts +5 -0
- package/dist/rules/no-cookies.d.ts.map +1 -0
- package/dist/rules/no-cookies.js +38 -0
- package/dist/rules/no-cookies.js.map +1 -0
- package/dist/rules/no-document-domain.d.ts +5 -0
- package/dist/rules/no-document-domain.d.ts.map +1 -0
- package/dist/rules/no-document-domain.js +41 -0
- package/dist/rules/no-document-domain.js.map +1 -0
- package/dist/rules/no-document-execcommand-insert-html.d.ts +5 -0
- package/dist/rules/no-document-execcommand-insert-html.d.ts.map +1 -0
- package/dist/rules/no-document-execcommand-insert-html.js +57 -0
- package/dist/rules/no-document-execcommand-insert-html.js.map +1 -0
- package/dist/rules/no-document-parse-html-unsafe.d.ts +5 -0
- package/dist/rules/no-document-parse-html-unsafe.d.ts.map +1 -0
- package/dist/rules/no-document-parse-html-unsafe.js +67 -0
- package/dist/rules/no-document-parse-html-unsafe.js.map +1 -0
- package/dist/rules/no-document-write.d.ts +5 -0
- package/dist/rules/no-document-write.d.ts.map +1 -0
- package/dist/rules/no-document-write.js +40 -0
- package/dist/rules/no-document-write.js.map +1 -0
- package/dist/rules/no-domparser-html-without-sanitization.d.ts +5 -0
- package/dist/rules/no-domparser-html-without-sanitization.d.ts.map +1 -0
- package/dist/rules/no-domparser-html-without-sanitization.js +56 -0
- package/dist/rules/no-domparser-html-without-sanitization.js.map +1 -0
- package/dist/rules/no-domparser-svg-without-sanitization.d.ts +5 -0
- package/dist/rules/no-domparser-svg-without-sanitization.d.ts.map +1 -0
- package/dist/rules/no-domparser-svg-without-sanitization.js +56 -0
- package/dist/rules/no-domparser-svg-without-sanitization.js.map +1 -0
- package/dist/rules/no-dynamic-import-unsafe-url.d.ts +5 -0
- package/dist/rules/no-dynamic-import-unsafe-url.d.ts.map +1 -0
- package/dist/rules/no-dynamic-import-unsafe-url.js +47 -0
- package/dist/rules/no-dynamic-import-unsafe-url.js.map +1 -0
- package/dist/rules/no-electron-allow-running-insecure-content.d.ts +5 -0
- package/dist/rules/no-electron-allow-running-insecure-content.d.ts.map +1 -0
- package/dist/rules/no-electron-allow-running-insecure-content.js +30 -0
- package/dist/rules/no-electron-allow-running-insecure-content.js.map +1 -0
- package/dist/rules/no-electron-dangerous-blink-features.d.ts +5 -0
- package/dist/rules/no-electron-dangerous-blink-features.d.ts.map +1 -0
- package/dist/rules/no-electron-dangerous-blink-features.js +89 -0
- package/dist/rules/no-electron-dangerous-blink-features.js.map +1 -0
- package/dist/rules/no-electron-disable-context-isolation.d.ts +5 -0
- package/dist/rules/no-electron-disable-context-isolation.d.ts.map +1 -0
- package/dist/rules/no-electron-disable-context-isolation.js +30 -0
- package/dist/rules/no-electron-disable-context-isolation.js.map +1 -0
- package/dist/rules/no-electron-disable-sandbox.d.ts +5 -0
- package/dist/rules/no-electron-disable-sandbox.d.ts.map +1 -0
- package/dist/rules/no-electron-disable-sandbox.js +30 -0
- package/dist/rules/no-electron-disable-sandbox.js.map +1 -0
- package/dist/rules/no-electron-disable-web-security.d.ts +5 -0
- package/dist/rules/no-electron-disable-web-security.d.ts.map +1 -0
- package/dist/rules/no-electron-disable-web-security.js +30 -0
- package/dist/rules/no-electron-disable-web-security.js.map +1 -0
- package/dist/rules/no-electron-enable-remote-module.d.ts +5 -0
- package/dist/rules/no-electron-enable-remote-module.d.ts.map +1 -0
- package/dist/rules/no-electron-enable-remote-module.js +30 -0
- package/dist/rules/no-electron-enable-remote-module.js.map +1 -0
- package/dist/rules/no-electron-enable-webview-tag.d.ts +5 -0
- package/dist/rules/no-electron-enable-webview-tag.d.ts.map +1 -0
- package/dist/rules/no-electron-enable-webview-tag.js +30 -0
- package/dist/rules/no-electron-enable-webview-tag.js.map +1 -0
- package/dist/rules/no-electron-experimental-features.d.ts +5 -0
- package/dist/rules/no-electron-experimental-features.d.ts.map +1 -0
- package/dist/rules/no-electron-experimental-features.js +30 -0
- package/dist/rules/no-electron-experimental-features.js.map +1 -0
- package/dist/rules/no-electron-expose-raw-ipc-renderer.d.ts +5 -0
- package/dist/rules/no-electron-expose-raw-ipc-renderer.d.ts.map +1 -0
- package/dist/rules/no-electron-expose-raw-ipc-renderer.js +108 -0
- package/dist/rules/no-electron-expose-raw-ipc-renderer.js.map +1 -0
- package/dist/rules/no-electron-insecure-certificate-error-handler.d.ts +5 -0
- package/dist/rules/no-electron-insecure-certificate-error-handler.d.ts.map +1 -0
- package/dist/rules/no-electron-insecure-certificate-error-handler.js +91 -0
- package/dist/rules/no-electron-insecure-certificate-error-handler.js.map +1 -0
- package/dist/rules/no-electron-insecure-certificate-verify-proc.d.ts +5 -0
- package/dist/rules/no-electron-insecure-certificate-verify-proc.d.ts.map +1 -0
- package/dist/rules/no-electron-insecure-certificate-verify-proc.js +75 -0
- package/dist/rules/no-electron-insecure-certificate-verify-proc.js.map +1 -0
- package/dist/rules/no-electron-insecure-permission-request-handler.d.ts +5 -0
- package/dist/rules/no-electron-insecure-permission-request-handler.d.ts.map +1 -0
- package/dist/rules/no-electron-insecure-permission-request-handler.js +75 -0
- package/dist/rules/no-electron-insecure-permission-request-handler.js.map +1 -0
- package/dist/rules/no-electron-node-integration.d.ts +5 -0
- package/dist/rules/no-electron-node-integration.d.ts.map +1 -0
- package/dist/rules/no-electron-node-integration.js +52 -0
- package/dist/rules/no-electron-node-integration.js.map +1 -0
- package/dist/rules/no-electron-permission-check-handler-allow-all.d.ts +5 -0
- package/dist/rules/no-electron-permission-check-handler-allow-all.d.ts.map +1 -0
- package/dist/rules/no-electron-permission-check-handler-allow-all.js +63 -0
- package/dist/rules/no-electron-permission-check-handler-allow-all.js.map +1 -0
- package/dist/rules/no-electron-unchecked-ipc-sender.d.ts +5 -0
- package/dist/rules/no-electron-unchecked-ipc-sender.d.ts.map +1 -0
- package/dist/rules/no-electron-unchecked-ipc-sender.js +90 -0
- package/dist/rules/no-electron-unchecked-ipc-sender.js.map +1 -0
- package/dist/rules/no-electron-unrestricted-navigation.d.ts +5 -0
- package/dist/rules/no-electron-unrestricted-navigation.d.ts.map +1 -0
- package/dist/rules/no-electron-unrestricted-navigation.js +100 -0
- package/dist/rules/no-electron-unrestricted-navigation.js.map +1 -0
- package/dist/rules/no-electron-untrusted-open-external.d.ts +5 -0
- package/dist/rules/no-electron-untrusted-open-external.d.ts.map +1 -0
- package/dist/rules/no-electron-untrusted-open-external.js +92 -0
- package/dist/rules/no-electron-untrusted-open-external.js.map +1 -0
- package/dist/rules/no-electron-webview-allowpopups.d.ts +5 -0
- package/dist/rules/no-electron-webview-allowpopups.d.ts.map +1 -0
- package/dist/rules/no-electron-webview-allowpopups.js +85 -0
- package/dist/rules/no-electron-webview-allowpopups.js.map +1 -0
- package/dist/rules/no-electron-webview-insecure-webpreferences.d.ts +5 -0
- package/dist/rules/no-electron-webview-insecure-webpreferences.d.ts.map +1 -0
- package/dist/rules/no-electron-webview-insecure-webpreferences.js +88 -0
- package/dist/rules/no-electron-webview-insecure-webpreferences.js.map +1 -0
- package/dist/rules/no-electron-webview-node-integration.d.ts +5 -0
- package/dist/rules/no-electron-webview-node-integration.d.ts.map +1 -0
- package/dist/rules/no-electron-webview-node-integration.js +107 -0
- package/dist/rules/no-electron-webview-node-integration.js.map +1 -0
- package/dist/rules/no-html-method.d.ts +5 -0
- package/dist/rules/no-html-method.d.ts.map +1 -0
- package/dist/rules/no-html-method.js +42 -0
- package/dist/rules/no-html-method.js.map +1 -0
- package/dist/rules/no-http-request-to-insecure-protocol.d.ts +5 -0
- package/dist/rules/no-http-request-to-insecure-protocol.d.ts.map +1 -0
- package/dist/rules/no-http-request-to-insecure-protocol.js +94 -0
- package/dist/rules/no-http-request-to-insecure-protocol.js.map +1 -0
- package/dist/rules/no-iframe-srcdoc.d.ts +5 -0
- package/dist/rules/no-iframe-srcdoc.d.ts.map +1 -0
- package/dist/rules/no-iframe-srcdoc.js +144 -0
- package/dist/rules/no-iframe-srcdoc.js.map +1 -0
- package/dist/rules/no-inner-html.d.ts +5 -0
- package/dist/rules/no-inner-html.d.ts.map +1 -0
- package/dist/rules/no-inner-html.js +67 -0
- package/dist/rules/no-inner-html.js.map +1 -0
- package/dist/rules/no-insecure-random.d.ts +5 -0
- package/dist/rules/no-insecure-random.d.ts.map +1 -0
- package/dist/rules/no-insecure-random.js +95 -0
- package/dist/rules/no-insecure-random.js.map +1 -0
- package/dist/rules/no-insecure-tls-agent-options.d.ts +5 -0
- package/dist/rules/no-insecure-tls-agent-options.d.ts.map +1 -0
- package/dist/rules/no-insecure-tls-agent-options.js +73 -0
- package/dist/rules/no-insecure-tls-agent-options.js.map +1 -0
- package/dist/rules/no-insecure-url.d.ts +12 -0
- package/dist/rules/no-insecure-url.d.ts.map +1 -0
- package/dist/rules/no-insecure-url.js +142 -0
- package/dist/rules/no-insecure-url.js.map +1 -0
- package/dist/rules/no-location-javascript-url.d.ts +5 -0
- package/dist/rules/no-location-javascript-url.d.ts.map +1 -0
- package/dist/rules/no-location-javascript-url.js +98 -0
- package/dist/rules/no-location-javascript-url.js.map +1 -0
- package/dist/rules/no-message-event-without-origin-check.d.ts +5 -0
- package/dist/rules/no-message-event-without-origin-check.d.ts.map +1 -0
- package/dist/rules/no-message-event-without-origin-check.js +183 -0
- package/dist/rules/no-message-event-without-origin-check.js.map +1 -0
- package/dist/rules/no-msapp-exec-unsafe.d.ts +5 -0
- package/dist/rules/no-msapp-exec-unsafe.d.ts.map +1 -0
- package/dist/rules/no-msapp-exec-unsafe.js +32 -0
- package/dist/rules/no-msapp-exec-unsafe.js.map +1 -0
- package/dist/rules/no-node-tls-check-server-identity-bypass.d.ts +5 -0
- package/dist/rules/no-node-tls-check-server-identity-bypass.d.ts.map +1 -0
- package/dist/rules/no-node-tls-check-server-identity-bypass.js +95 -0
- package/dist/rules/no-node-tls-check-server-identity-bypass.js.map +1 -0
- package/dist/rules/no-node-tls-legacy-protocol.d.ts +5 -0
- package/dist/rules/no-node-tls-legacy-protocol.d.ts.map +1 -0
- package/dist/rules/no-node-tls-legacy-protocol.js +106 -0
- package/dist/rules/no-node-tls-legacy-protocol.js.map +1 -0
- package/dist/rules/no-node-tls-reject-unauthorized-zero.d.ts +5 -0
- package/dist/rules/no-node-tls-reject-unauthorized-zero.d.ts.map +1 -0
- package/dist/rules/no-node-tls-reject-unauthorized-zero.js +93 -0
- package/dist/rules/no-node-tls-reject-unauthorized-zero.js.map +1 -0
- package/dist/rules/no-node-tls-security-level-zero.d.ts +5 -0
- package/dist/rules/no-node-tls-security-level-zero.d.ts.map +1 -0
- package/dist/rules/no-node-tls-security-level-zero.js +80 -0
- package/dist/rules/no-node-tls-security-level-zero.js.map +1 -0
- package/dist/rules/no-node-vm-run-in-context.d.ts +5 -0
- package/dist/rules/no-node-vm-run-in-context.d.ts.map +1 -0
- package/dist/rules/no-node-vm-run-in-context.js +186 -0
- package/dist/rules/no-node-vm-run-in-context.js.map +1 -0
- package/dist/rules/no-node-vm-source-text-module.d.ts +5 -0
- package/dist/rules/no-node-vm-source-text-module.d.ts.map +1 -0
- package/dist/rules/no-node-vm-source-text-module.js +126 -0
- package/dist/rules/no-node-vm-source-text-module.js.map +1 -0
- package/dist/rules/no-node-worker-threads-eval.d.ts +5 -0
- package/dist/rules/no-node-worker-threads-eval.d.ts.map +1 -0
- package/dist/rules/no-node-worker-threads-eval.js +151 -0
- package/dist/rules/no-node-worker-threads-eval.js.map +1 -0
- package/dist/rules/no-nonnull-assertion-on-security-input.d.ts +5 -0
- package/dist/rules/no-nonnull-assertion-on-security-input.d.ts.map +1 -0
- package/dist/rules/no-nonnull-assertion-on-security-input.js +48 -0
- package/dist/rules/no-nonnull-assertion-on-security-input.js.map +1 -0
- package/dist/rules/no-postmessage-star-origin.d.ts +5 -0
- package/dist/rules/no-postmessage-star-origin.d.ts.map +1 -0
- package/dist/rules/no-postmessage-star-origin.js +58 -0
- package/dist/rules/no-postmessage-star-origin.js.map +1 -0
- package/dist/rules/no-postmessage-without-origin-allowlist.d.ts +5 -0
- package/dist/rules/no-postmessage-without-origin-allowlist.d.ts.map +1 -0
- package/dist/rules/no-postmessage-without-origin-allowlist.js +80 -0
- package/dist/rules/no-postmessage-without-origin-allowlist.js.map +1 -0
- package/dist/rules/no-range-create-contextual-fragment.d.ts +5 -0
- package/dist/rules/no-range-create-contextual-fragment.d.ts.map +1 -0
- package/dist/rules/no-range-create-contextual-fragment.js +64 -0
- package/dist/rules/no-range-create-contextual-fragment.js.map +1 -0
- package/dist/rules/no-script-src-data-url.d.ts +5 -0
- package/dist/rules/no-script-src-data-url.d.ts.map +1 -0
- package/dist/rules/no-script-src-data-url.js +108 -0
- package/dist/rules/no-script-src-data-url.js.map +1 -0
- package/dist/rules/no-script-text.d.ts +5 -0
- package/dist/rules/no-script-text.d.ts.map +1 -0
- package/dist/rules/no-script-text.js +52 -0
- package/dist/rules/no-script-text.js.map +1 -0
- package/dist/rules/no-service-worker-unsafe-script-url.d.ts +5 -0
- package/dist/rules/no-service-worker-unsafe-script-url.d.ts.map +1 -0
- package/dist/rules/no-service-worker-unsafe-script-url.js +52 -0
- package/dist/rules/no-service-worker-unsafe-script-url.js.map +1 -0
- package/dist/rules/no-set-html-unsafe.d.ts +5 -0
- package/dist/rules/no-set-html-unsafe.d.ts.map +1 -0
- package/dist/rules/no-set-html-unsafe.js +48 -0
- package/dist/rules/no-set-html-unsafe.js.map +1 -0
- package/dist/rules/no-trusted-types-policy-pass-through.d.ts +5 -0
- package/dist/rules/no-trusted-types-policy-pass-through.d.ts.map +1 -0
- package/dist/rules/no-trusted-types-policy-pass-through.js +115 -0
- package/dist/rules/no-trusted-types-policy-pass-through.js.map +1 -0
- package/dist/rules/no-unsafe-alloc.d.ts +5 -0
- package/dist/rules/no-unsafe-alloc.d.ts.map +1 -0
- package/dist/rules/no-unsafe-alloc.js +51 -0
- package/dist/rules/no-unsafe-alloc.js.map +1 -0
- package/dist/rules/no-unsafe-cast-to-trusted-types.d.ts +5 -0
- package/dist/rules/no-unsafe-cast-to-trusted-types.d.ts.map +1 -0
- package/dist/rules/no-unsafe-cast-to-trusted-types.js +89 -0
- package/dist/rules/no-unsafe-cast-to-trusted-types.js.map +1 -0
- package/dist/rules/no-window-open-without-noopener.d.ts +5 -0
- package/dist/rules/no-window-open-without-noopener.d.ts.map +1 -0
- package/dist/rules/no-window-open-without-noopener.js +84 -0
- package/dist/rules/no-window-open-without-noopener.js.map +1 -0
- package/dist/rules/no-winjs-html-unsafe.d.ts +5 -0
- package/dist/rules/no-winjs-html-unsafe.d.ts.map +1 -0
- package/dist/rules/no-winjs-html-unsafe.js +32 -0
- package/dist/rules/no-winjs-html-unsafe.js.map +1 -0
- package/dist/rules/no-worker-blob-url.d.ts +5 -0
- package/dist/rules/no-worker-blob-url.d.ts.map +1 -0
- package/dist/rules/no-worker-blob-url.js +64 -0
- package/dist/rules/no-worker-blob-url.js.map +1 -0
- package/dist/rules/no-worker-data-url.d.ts +5 -0
- package/dist/rules/no-worker-data-url.d.ts.map +1 -0
- package/dist/rules/no-worker-data-url.js +67 -0
- package/dist/rules/no-worker-data-url.js.map +1 -0
- package/docs/rules/getting-started.md +70 -0
- package/docs/rules/no-angular-bypass-sanitizer.md +69 -0
- package/docs/rules/no-angular-bypass-security-trust-html.md +59 -0
- package/docs/rules/no-angular-innerhtml-binding.md +59 -0
- package/docs/rules/no-angular-sanitization-trusted-urls.md +64 -0
- package/docs/rules/no-angularjs-bypass-sce.md +64 -0
- package/docs/rules/no-angularjs-enable-svg.md +59 -0
- package/docs/rules/no-angularjs-ng-bind-html-without-sanitize.md +59 -0
- package/docs/rules/no-angularjs-sanitization-whitelist.md +63 -0
- package/docs/rules/no-angularjs-sce-resource-url-wildcard.md +62 -0
- package/docs/rules/no-child-process-exec.md +101 -0
- package/docs/rules/no-child-process-shell-true.md +59 -0
- package/docs/rules/no-cookies.md +61 -0
- package/docs/rules/no-document-domain.md +59 -0
- package/docs/rules/no-document-execcommand-insert-html.md +69 -0
- package/docs/rules/no-document-parse-html-unsafe.md +72 -0
- package/docs/rules/no-document-write.md +64 -0
- package/docs/rules/no-domparser-html-without-sanitization.md +59 -0
- package/docs/rules/no-domparser-svg-without-sanitization.md +71 -0
- package/docs/rules/no-dynamic-import-unsafe-url.md +81 -0
- package/docs/rules/no-electron-allow-running-insecure-content.md +69 -0
- package/docs/rules/no-electron-dangerous-blink-features.md +77 -0
- package/docs/rules/no-electron-disable-context-isolation.md +69 -0
- package/docs/rules/no-electron-disable-sandbox.md +69 -0
- package/docs/rules/no-electron-disable-web-security.md +69 -0
- package/docs/rules/no-electron-enable-remote-module.md +69 -0
- package/docs/rules/no-electron-enable-webview-tag.md +77 -0
- package/docs/rules/no-electron-experimental-features.md +77 -0
- package/docs/rules/no-electron-expose-raw-ipc-renderer.md +79 -0
- package/docs/rules/no-electron-insecure-certificate-error-handler.md +72 -0
- package/docs/rules/no-electron-insecure-certificate-verify-proc.md +63 -0
- package/docs/rules/no-electron-insecure-permission-request-handler.md +67 -0
- package/docs/rules/no-electron-node-integration.md +70 -0
- package/docs/rules/no-electron-permission-check-handler-allow-all.md +66 -0
- package/docs/rules/no-electron-unchecked-ipc-sender.md +62 -0
- package/docs/rules/no-electron-unrestricted-navigation.md +64 -0
- package/docs/rules/no-electron-untrusted-open-external.md +65 -0
- package/docs/rules/no-electron-webview-allowpopups.md +59 -0
- package/docs/rules/no-electron-webview-insecure-webpreferences.md +84 -0
- package/docs/rules/no-electron-webview-node-integration.md +59 -0
- package/docs/rules/no-html-method.md +58 -0
- package/docs/rules/no-http-request-to-insecure-protocol.md +59 -0
- package/docs/rules/no-iframe-srcdoc.md +76 -0
- package/docs/rules/no-inner-html.md +65 -0
- package/docs/rules/no-insecure-random.md +66 -0
- package/docs/rules/no-insecure-tls-agent-options.md +59 -0
- package/docs/rules/no-insecure-url.md +72 -0
- package/docs/rules/no-location-javascript-url.md +59 -0
- package/docs/rules/no-message-event-without-origin-check.md +82 -0
- package/docs/rules/no-msapp-exec-unsafe.md +59 -0
- package/docs/rules/no-node-tls-check-server-identity-bypass.md +88 -0
- package/docs/rules/no-node-tls-legacy-protocol.md +80 -0
- package/docs/rules/no-node-tls-reject-unauthorized-zero.md +61 -0
- package/docs/rules/no-node-tls-security-level-zero.md +77 -0
- package/docs/rules/no-node-vm-run-in-context.md +89 -0
- package/docs/rules/no-node-vm-source-text-module.md +79 -0
- package/docs/rules/no-node-worker-threads-eval.md +82 -0
- package/docs/rules/no-nonnull-assertion-on-security-input.md +59 -0
- package/docs/rules/no-postmessage-star-origin.md +59 -0
- package/docs/rules/no-postmessage-without-origin-allowlist.md +59 -0
- package/docs/rules/no-range-create-contextual-fragment.md +64 -0
- package/docs/rules/no-script-src-data-url.md +83 -0
- package/docs/rules/no-script-text.md +80 -0
- package/docs/rules/no-service-worker-unsafe-script-url.md +85 -0
- package/docs/rules/no-set-html-unsafe.md +64 -0
- package/docs/rules/no-trusted-types-policy-pass-through.md +68 -0
- package/docs/rules/no-unsafe-alloc.md +62 -0
- package/docs/rules/no-unsafe-cast-to-trusted-types.md +59 -0
- package/docs/rules/no-window-open-without-noopener.md +63 -0
- package/docs/rules/no-winjs-html-unsafe.md +60 -0
- package/docs/rules/no-worker-blob-url.md +86 -0
- package/docs/rules/no-worker-data-url.md +85 -0
- package/docs/rules/overview.md +111 -0
- package/docs/rules/presets/angular.md +35 -0
- package/docs/rules/presets/angularjs.md +36 -0
- package/docs/rules/presets/common.md +59 -0
- package/docs/rules/presets/electron.md +51 -0
- package/docs/rules/presets/index.md +26 -0
- package/docs/rules/presets/node.md +43 -0
- package/docs/rules/presets/react.md +33 -0
- package/docs/rules/presets/recommended.md +104 -0
- package/docs/rules/presets/required.md +99 -0
- package/docs/rules/presets/typescript.md +34 -0
- package/package.json +583 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-disable-sandbox.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-disable-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
|
|
3
|
+
/** Rule implementation. */
|
|
4
|
+
const rule = createRule({
|
|
5
|
+
create(context) {
|
|
6
|
+
return createElectronWebPreferencesBooleanListener(context, {
|
|
7
|
+
disallowedValue: false,
|
|
8
|
+
preferenceName: "sandbox",
|
|
9
|
+
});
|
|
10
|
+
},
|
|
11
|
+
defaultOptions: [],
|
|
12
|
+
meta: {
|
|
13
|
+
deprecated: false,
|
|
14
|
+
docs: {
|
|
15
|
+
description: "disallow disabling Electron sandbox in webPreferences.",
|
|
16
|
+
frozen: false,
|
|
17
|
+
recommended: false,
|
|
18
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-disable-sandbox",
|
|
19
|
+
},
|
|
20
|
+
fixable: "code",
|
|
21
|
+
messages: {
|
|
22
|
+
default: "Do not set webPreferences.sandbox to false.",
|
|
23
|
+
},
|
|
24
|
+
schema: [],
|
|
25
|
+
type: "problem",
|
|
26
|
+
},
|
|
27
|
+
name: "no-electron-disable-sandbox",
|
|
28
|
+
});
|
|
29
|
+
export default rule;
|
|
30
|
+
//# sourceMappingURL=no-electron-disable-sandbox.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-disable-sandbox.js","sourceRoot":"","sources":["../../src/rules/no-electron-disable-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,SAAS;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,wDAAwD;YAC5D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,yFAAyF;SACjG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,6CAA6C;SACzD;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,6BAA6B;CACtC,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-disable-web-security.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-disable-web-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
|
|
3
|
+
/** Rule implementation. */
|
|
4
|
+
const rule = createRule({
|
|
5
|
+
create(context) {
|
|
6
|
+
return createElectronWebPreferencesBooleanListener(context, {
|
|
7
|
+
disallowedValue: false,
|
|
8
|
+
preferenceName: "webSecurity",
|
|
9
|
+
});
|
|
10
|
+
},
|
|
11
|
+
defaultOptions: [],
|
|
12
|
+
meta: {
|
|
13
|
+
deprecated: false,
|
|
14
|
+
docs: {
|
|
15
|
+
description: "disallow disabling webSecurity in Electron webPreferences.",
|
|
16
|
+
frozen: false,
|
|
17
|
+
recommended: false,
|
|
18
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-disable-web-security",
|
|
19
|
+
},
|
|
20
|
+
fixable: "code",
|
|
21
|
+
messages: {
|
|
22
|
+
default: "Do not set webPreferences.webSecurity to false.",
|
|
23
|
+
},
|
|
24
|
+
schema: [],
|
|
25
|
+
type: "problem",
|
|
26
|
+
},
|
|
27
|
+
name: "no-electron-disable-web-security",
|
|
28
|
+
});
|
|
29
|
+
export default rule;
|
|
30
|
+
//# sourceMappingURL=no-electron-disable-web-security.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-disable-web-security.js","sourceRoot":"","sources":["../../src/rules/no-electron-disable-web-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,aAAa;SAChC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,4DAA4D;YAChE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,8FAA8F;SACtG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,iDAAiD;SAC7D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,kCAAkC;CAC3C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-enable-remote-module.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-enable-remote-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
|
|
3
|
+
/** Rule implementation. */
|
|
4
|
+
const rule = createRule({
|
|
5
|
+
create(context) {
|
|
6
|
+
return createElectronWebPreferencesBooleanListener(context, {
|
|
7
|
+
disallowedValue: true,
|
|
8
|
+
preferenceName: "enableRemoteModule",
|
|
9
|
+
});
|
|
10
|
+
},
|
|
11
|
+
defaultOptions: [],
|
|
12
|
+
meta: {
|
|
13
|
+
deprecated: false,
|
|
14
|
+
docs: {
|
|
15
|
+
description: "disallow enabling enableRemoteModule in Electron webPreferences.",
|
|
16
|
+
frozen: false,
|
|
17
|
+
recommended: false,
|
|
18
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-enable-remote-module",
|
|
19
|
+
},
|
|
20
|
+
fixable: "code",
|
|
21
|
+
messages: {
|
|
22
|
+
default: "Do not set webPreferences.enableRemoteModule to true.",
|
|
23
|
+
},
|
|
24
|
+
schema: [],
|
|
25
|
+
type: "problem",
|
|
26
|
+
},
|
|
27
|
+
name: "no-electron-enable-remote-module",
|
|
28
|
+
});
|
|
29
|
+
export default rule;
|
|
30
|
+
//# sourceMappingURL=no-electron-enable-remote-module.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-enable-remote-module.js","sourceRoot":"","sources":["../../src/rules/no-electron-enable-remote-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,oBAAoB;SACvC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,kEAAkE;YACtE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,8FAA8F;SACtG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,uDAAuD;SACnE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,kCAAkC;CAC3C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-enable-webview-tag.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-enable-webview-tag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
|
|
3
|
+
/** Rule implementation. */
|
|
4
|
+
const rule = createRule({
|
|
5
|
+
create(context) {
|
|
6
|
+
return createElectronWebPreferencesBooleanListener(context, {
|
|
7
|
+
disallowedValue: true,
|
|
8
|
+
preferenceName: "webviewTag",
|
|
9
|
+
});
|
|
10
|
+
},
|
|
11
|
+
defaultOptions: [],
|
|
12
|
+
meta: {
|
|
13
|
+
deprecated: false,
|
|
14
|
+
docs: {
|
|
15
|
+
description: "disallow enabling Electron webPreferences.webviewTag.",
|
|
16
|
+
frozen: false,
|
|
17
|
+
recommended: false,
|
|
18
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-enable-webview-tag",
|
|
19
|
+
},
|
|
20
|
+
fixable: "code",
|
|
21
|
+
messages: {
|
|
22
|
+
default: "Do not set webPreferences.webviewTag to true.",
|
|
23
|
+
},
|
|
24
|
+
schema: [],
|
|
25
|
+
type: "problem",
|
|
26
|
+
},
|
|
27
|
+
name: "no-electron-enable-webview-tag",
|
|
28
|
+
});
|
|
29
|
+
export default rule;
|
|
30
|
+
//# sourceMappingURL=no-electron-enable-webview-tag.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-enable-webview-tag.js","sourceRoot":"","sources":["../../src/rules/no-electron-enable-webview-tag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,YAAY;SAC/B,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,uDAAuD;YAC3D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,4FAA4F;SACpG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,+CAA+C;SAC3D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,gCAAgC;CACzC,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-experimental-features.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-experimental-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
|
|
3
|
+
/** Rule implementation. */
|
|
4
|
+
const rule = createRule({
|
|
5
|
+
create(context) {
|
|
6
|
+
return createElectronWebPreferencesBooleanListener(context, {
|
|
7
|
+
disallowedValue: true,
|
|
8
|
+
preferenceName: "experimentalFeatures",
|
|
9
|
+
});
|
|
10
|
+
},
|
|
11
|
+
defaultOptions: [],
|
|
12
|
+
meta: {
|
|
13
|
+
deprecated: false,
|
|
14
|
+
docs: {
|
|
15
|
+
description: "disallow enabling Electron webPreferences.experimentalFeatures.",
|
|
16
|
+
frozen: false,
|
|
17
|
+
recommended: false,
|
|
18
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-experimental-features",
|
|
19
|
+
},
|
|
20
|
+
fixable: "code",
|
|
21
|
+
messages: {
|
|
22
|
+
default: "Do not set webPreferences.experimentalFeatures to true.",
|
|
23
|
+
},
|
|
24
|
+
schema: [],
|
|
25
|
+
type: "problem",
|
|
26
|
+
},
|
|
27
|
+
name: "no-electron-experimental-features",
|
|
28
|
+
});
|
|
29
|
+
export default rule;
|
|
30
|
+
//# sourceMappingURL=no-electron-experimental-features.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-experimental-features.js","sourceRoot":"","sources":["../../src/rules/no-electron-experimental-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,sBAAsB;SACzC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,iEAAiE;YACrE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,+FAA+F;SACvG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,yDAAyD;SACrE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,mCAAmC;CAC5C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-expose-raw-ipc-renderer.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-expose-raw-ipc-renderer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqGzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CA2CtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
+
import { getMemberPropertyName } from "../_internal/estree-utils.js";
|
|
3
|
+
const isExpressionNode = (node) => node.type !== "ArrayPattern" &&
|
|
4
|
+
node.type !== "AssignmentPattern" &&
|
|
5
|
+
node.type !== "ObjectPattern";
|
|
6
|
+
const isContextBridgeObjectExpression = (expression) => {
|
|
7
|
+
if (expression.type === "Identifier") {
|
|
8
|
+
return expression.name === "contextBridge";
|
|
9
|
+
}
|
|
10
|
+
if (expression.type !== "MemberExpression") {
|
|
11
|
+
return false;
|
|
12
|
+
}
|
|
13
|
+
return getMemberPropertyName(expression) === "contextBridge";
|
|
14
|
+
};
|
|
15
|
+
const isContextBridgeExposeCall = (node) => {
|
|
16
|
+
if (node.callee.type !== "MemberExpression") {
|
|
17
|
+
return false;
|
|
18
|
+
}
|
|
19
|
+
const methodName = getMemberPropertyName(node.callee);
|
|
20
|
+
if (methodName !== "exposeInIsolatedWorld" &&
|
|
21
|
+
methodName !== "exposeInMainWorld") {
|
|
22
|
+
return false;
|
|
23
|
+
}
|
|
24
|
+
return isContextBridgeObjectExpression(node.callee.object);
|
|
25
|
+
};
|
|
26
|
+
const isIpcRendererReference = (expression) => {
|
|
27
|
+
if (expression.type === "Identifier") {
|
|
28
|
+
return expression.name === "ipcRenderer";
|
|
29
|
+
}
|
|
30
|
+
if (expression.type !== "MemberExpression") {
|
|
31
|
+
return false;
|
|
32
|
+
}
|
|
33
|
+
if (expression.object.type === "Identifier") {
|
|
34
|
+
return expression.object.name === "ipcRenderer";
|
|
35
|
+
}
|
|
36
|
+
if (expression.object.type !== "MemberExpression") {
|
|
37
|
+
return false;
|
|
38
|
+
}
|
|
39
|
+
return getMemberPropertyName(expression.object) === "ipcRenderer";
|
|
40
|
+
};
|
|
41
|
+
const isUnsafeExposedValue = (expression) => {
|
|
42
|
+
if (isIpcRendererReference(expression)) {
|
|
43
|
+
return true;
|
|
44
|
+
}
|
|
45
|
+
if (expression.type === "CallExpression" &&
|
|
46
|
+
expression.callee.type === "MemberExpression" &&
|
|
47
|
+
getMemberPropertyName(expression.callee) === "bind" &&
|
|
48
|
+
expression.callee.object.type === "MemberExpression") {
|
|
49
|
+
return isIpcRendererReference(expression.callee.object);
|
|
50
|
+
}
|
|
51
|
+
if (expression.type === "ArrayExpression") {
|
|
52
|
+
return expression.elements.some((element) => element !== null &&
|
|
53
|
+
element.type !== "SpreadElement" &&
|
|
54
|
+
isUnsafeExposedValue(element));
|
|
55
|
+
}
|
|
56
|
+
if (expression.type !== "ObjectExpression") {
|
|
57
|
+
return false;
|
|
58
|
+
}
|
|
59
|
+
return expression.properties.some((propertyNode) => {
|
|
60
|
+
if (propertyNode.type === "SpreadElement") {
|
|
61
|
+
return isUnsafeExposedValue(propertyNode.argument);
|
|
62
|
+
}
|
|
63
|
+
return (propertyNode.kind === "init" &&
|
|
64
|
+
isExpressionNode(propertyNode.value) &&
|
|
65
|
+
isUnsafeExposedValue(propertyNode.value));
|
|
66
|
+
});
|
|
67
|
+
};
|
|
68
|
+
/** Rule implementation. */
|
|
69
|
+
const rule = createRule({
|
|
70
|
+
create(context) {
|
|
71
|
+
return {
|
|
72
|
+
CallExpression(node) {
|
|
73
|
+
if (!isContextBridgeExposeCall(node)) {
|
|
74
|
+
return;
|
|
75
|
+
}
|
|
76
|
+
const [, exposedValue] = node.arguments;
|
|
77
|
+
if (exposedValue === undefined ||
|
|
78
|
+
exposedValue.type === "SpreadElement" ||
|
|
79
|
+
!isUnsafeExposedValue(exposedValue)) {
|
|
80
|
+
return;
|
|
81
|
+
}
|
|
82
|
+
context.report({
|
|
83
|
+
messageId: "default",
|
|
84
|
+
node: exposedValue,
|
|
85
|
+
});
|
|
86
|
+
},
|
|
87
|
+
};
|
|
88
|
+
},
|
|
89
|
+
defaultOptions: [],
|
|
90
|
+
meta: {
|
|
91
|
+
deprecated: false,
|
|
92
|
+
docs: {
|
|
93
|
+
description: "disallow exposing raw Electron ipcRenderer objects or methods through contextBridge APIs.",
|
|
94
|
+
frozen: false,
|
|
95
|
+
recommended: false,
|
|
96
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-expose-raw-ipc-renderer",
|
|
97
|
+
},
|
|
98
|
+
messages: {
|
|
99
|
+
default: "Expose narrow preload wrapper functions instead of raw ipcRenderer objects or methods.",
|
|
100
|
+
},
|
|
101
|
+
schema: [],
|
|
102
|
+
type: "problem",
|
|
103
|
+
},
|
|
104
|
+
name: "no-electron-expose-raw-ipc-renderer",
|
|
105
|
+
});
|
|
106
|
+
export default rule;
|
|
107
|
+
/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
|
|
108
|
+
//# sourceMappingURL=no-electron-expose-raw-ipc-renderer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-expose-raw-ipc-renderer.js","sourceRoot":"","sources":["../../src/rules/no-electron-expose-raw-ipc-renderer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAIrE,MAAM,gBAAgB,GAAG,CAAC,IAAmB,EAA+B,EAAE,CAC1E,IAAI,CAAC,IAAI,KAAK,cAAc;IAC5B,IAAI,CAAC,IAAI,KAAK,mBAAmB;IACjC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC;AAElC,MAAM,+BAA+B,GAAG,CACpC,UAA+B,EACxB,EAAE;IACT,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,qBAAqB,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,IAA6B,EAAW,EAAE;IACzE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtD,IACI,UAAU,KAAK,uBAAuB;QACtC,UAAU,KAAK,mBAAmB,EACpC,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,UAA+B,EAAW,EAAE;IACxE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,KAAK,aAAa,CAAC;IAC7C,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,UAA+B,EAAW,EAAE;IACtE,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IACI,UAAU,CAAC,IAAI,KAAK,gBAAgB;QACpC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;QAC7C,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM;QACnD,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EACtD,CAAC;QACC,OAAO,sBAAsB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAkC,EAAE,CACxC,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,oBAAoB,CAAC,OAAO,CAAC,CACpC,CAAC;IACN,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;QAC/C,IAAI,YAAY,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACxC,OAAO,oBAAoB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,CACH,YAAY,CAAC,IAAI,KAAK,MAAM;YAC5B,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC;YACpC,oBAAoB,CAAC,YAAY,CAAC,KAAK,CAAC,CAC3C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAExC,IACI,YAAY,KAAK,SAAS;oBAC1B,YAAY,CAAC,IAAI,KAAK,eAAe;oBACrC,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACrC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,YAAY;iBACrB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,2FAA2F;YAC/F,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,iGAAiG;SACzG;QACD,QAAQ,EAAE;YACN,OAAO,EACH,wFAAwF;SAC/F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,qCAAqC;CAC9C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-insecure-certificate-error-handler.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-error-handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAsEzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,91 @@
|
|
|
1
|
+
import { arrayAt, arrayFirst } from "ts-extras";
|
|
2
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
3
|
+
const getStaticStringValue = (node) => {
|
|
4
|
+
if (node.type === "Literal" && typeof node.value === "string") {
|
|
5
|
+
return node.value;
|
|
6
|
+
}
|
|
7
|
+
if (node.type === "TemplateLiteral" && node.expressions.length === 0) {
|
|
8
|
+
return arrayFirst(node.quasis)?.value.cooked ?? undefined;
|
|
9
|
+
}
|
|
10
|
+
return undefined;
|
|
11
|
+
};
|
|
12
|
+
const isOnMemberExpression = (callee) => {
|
|
13
|
+
if (callee.type !== "MemberExpression" || callee.computed) {
|
|
14
|
+
return false;
|
|
15
|
+
}
|
|
16
|
+
return (callee.property.type === "Identifier" && callee.property.name === "on");
|
|
17
|
+
};
|
|
18
|
+
const getCallbackParameterName = (node) => {
|
|
19
|
+
const callbackParameter = arrayAt(node.params, -1);
|
|
20
|
+
return callbackParameter?.type === "Identifier"
|
|
21
|
+
? callbackParameter.name
|
|
22
|
+
: undefined;
|
|
23
|
+
};
|
|
24
|
+
const toUnsafeCallbackTruePattern = (callbackName) =>
|
|
25
|
+
// eslint-disable-next-line security/detect-non-literal-regexp -- Callback identifier is static source text and safely interpolated for targeted pattern matching.
|
|
26
|
+
new RegExp(String.raw `\b${callbackName}\s*\(\s*true\b`, "u");
|
|
27
|
+
const hasUnsafeCallbackTrueCall = (callbackName, handlerNode, context) => {
|
|
28
|
+
const handlerSourceText = context.sourceCode.getText(handlerNode);
|
|
29
|
+
return toUnsafeCallbackTruePattern(callbackName).test(handlerSourceText);
|
|
30
|
+
};
|
|
31
|
+
const isCertificateErrorEventRegistration = (node) => {
|
|
32
|
+
if (!isOnMemberExpression(node.callee)) {
|
|
33
|
+
return false;
|
|
34
|
+
}
|
|
35
|
+
const [firstArgument] = node.arguments;
|
|
36
|
+
if (firstArgument === undefined || firstArgument.type === "SpreadElement") {
|
|
37
|
+
return false;
|
|
38
|
+
}
|
|
39
|
+
return getStaticStringValue(firstArgument) === "certificate-error";
|
|
40
|
+
};
|
|
41
|
+
/** Rule implementation. */
|
|
42
|
+
const rule = createRule({
|
|
43
|
+
create(context) {
|
|
44
|
+
return {
|
|
45
|
+
CallExpression(node) {
|
|
46
|
+
if (!isCertificateErrorEventRegistration(node)) {
|
|
47
|
+
return;
|
|
48
|
+
}
|
|
49
|
+
const [, secondArgument] = node.arguments;
|
|
50
|
+
if (secondArgument === undefined ||
|
|
51
|
+
secondArgument.type === "SpreadElement") {
|
|
52
|
+
return;
|
|
53
|
+
}
|
|
54
|
+
if (secondArgument.type !== "ArrowFunctionExpression" &&
|
|
55
|
+
secondArgument.type !== "FunctionExpression") {
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
const callbackParameterName = getCallbackParameterName(secondArgument);
|
|
59
|
+
if (typeof callbackParameterName !== "string") {
|
|
60
|
+
return;
|
|
61
|
+
}
|
|
62
|
+
if (!hasUnsafeCallbackTrueCall(callbackParameterName, secondArgument, context)) {
|
|
63
|
+
return;
|
|
64
|
+
}
|
|
65
|
+
context.report({
|
|
66
|
+
messageId: "default",
|
|
67
|
+
node: secondArgument,
|
|
68
|
+
});
|
|
69
|
+
},
|
|
70
|
+
};
|
|
71
|
+
},
|
|
72
|
+
defaultOptions: [],
|
|
73
|
+
meta: {
|
|
74
|
+
deprecated: false,
|
|
75
|
+
docs: {
|
|
76
|
+
description: "disallow Electron certificate-error handlers that call the callback with true.",
|
|
77
|
+
frozen: false,
|
|
78
|
+
recommended: false,
|
|
79
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-insecure-certificate-error-handler",
|
|
80
|
+
},
|
|
81
|
+
messages: {
|
|
82
|
+
default: "Do not bypass certificate validation by calling the certificate-error callback with true.",
|
|
83
|
+
},
|
|
84
|
+
schema: [],
|
|
85
|
+
type: "problem",
|
|
86
|
+
},
|
|
87
|
+
name: "no-electron-insecure-certificate-error-handler",
|
|
88
|
+
});
|
|
89
|
+
export default rule;
|
|
90
|
+
/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
|
|
91
|
+
//# sourceMappingURL=no-electron-insecure-certificate-error-handler.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-insecure-certificate-error-handler.js","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-error-handler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,oBAAoB,GAAG,CACzB,IAAyB,EACP,EAAE;IACpB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;IAC9D,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CACzB,MAAyC,EAClC,EAAE;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CACH,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CACzE,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC7B,IAAoE,EAClD,EAAE;IACpB,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,iBAAiB,EAAE,IAAI,KAAK,YAAY;QAC3C,CAAC,CAAC,iBAAiB,CAAC,IAAI;QACxB,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,YAAoB,EAAU,EAAE;AACjE,kKAAkK;AAClK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,YAAY,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAEjE,MAAM,yBAAyB,GAAG,CAC9B,YAAoB,EACpB,WAA2E,EAC3E,OAAoD,EAC7C,EAAE;IACT,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAElE,OAAO,2BAA2B,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CACxC,IAA6B,EACtB,EAAE;IACT,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAEvC,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,oBAAoB,CAAC,aAAa,CAAC,KAAK,mBAAmB,CAAC;AACvE,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAE1C,IACI,cAAc,KAAK,SAAS;oBAC5B,cAAc,CAAC,IAAI,KAAK,eAAe,EACzC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IACI,cAAc,CAAC,IAAI,KAAK,yBAAyB;oBACjD,cAAc,CAAC,IAAI,KAAK,oBAAoB,EAC9C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,qBAAqB,GACvB,wBAAwB,CAAC,cAAc,CAAC,CAAC;gBAE7C,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;oBAC5C,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,yBAAyB,CACtB,qBAAqB,EACrB,cAAc,EACd,OAAO,CACV,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,cAAc;iBACvB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,gFAAgF;YACpF,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,4GAA4G;SACpH;QACD,QAAQ,EAAE;YACN,OAAO,EACH,2FAA2F;SAClG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,gDAAgD;CACzD,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-insecure-certificate-verify-proc.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-verify-proc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqDzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
import { arrayAt } from "ts-extras";
|
|
2
|
+
import { createRule } from "../_internal/create-rule.js";
|
|
3
|
+
const getMemberPropertyName = (memberExpression) => {
|
|
4
|
+
if (!memberExpression.computed &&
|
|
5
|
+
memberExpression.property.type === "Identifier") {
|
|
6
|
+
return memberExpression.property.name;
|
|
7
|
+
}
|
|
8
|
+
if (memberExpression.property.type === "Literal" &&
|
|
9
|
+
typeof memberExpression.property.value === "string") {
|
|
10
|
+
return memberExpression.property.value;
|
|
11
|
+
}
|
|
12
|
+
return undefined;
|
|
13
|
+
};
|
|
14
|
+
const isFunctionExpression = (expression) => expression.type === "ArrowFunctionExpression" ||
|
|
15
|
+
expression.type === "FunctionExpression";
|
|
16
|
+
const hasInsecureCertificateOverride = (callbackNode, context, callbackParameterName) => {
|
|
17
|
+
const callbackSourceText = context.sourceCode.getText(callbackNode);
|
|
18
|
+
const escapedName = callbackParameterName.replaceAll("$", String.raw `\$`);
|
|
19
|
+
// eslint-disable-next-line security/detect-non-literal-regexp -- Callback identifier is escaped before interpolation for strict handler-call detection.
|
|
20
|
+
const callbackPattern = new RegExp(String.raw `\b${escapedName}\s*\(\s*0\b`, "u");
|
|
21
|
+
return (callbackPattern.test(callbackSourceText) ||
|
|
22
|
+
/\breturn\s+0\b/u.test(callbackSourceText));
|
|
23
|
+
};
|
|
24
|
+
/** Rule implementation. */
|
|
25
|
+
const rule = createRule({
|
|
26
|
+
create(context) {
|
|
27
|
+
return {
|
|
28
|
+
CallExpression(node) {
|
|
29
|
+
if (node.callee.type !== "MemberExpression") {
|
|
30
|
+
return;
|
|
31
|
+
}
|
|
32
|
+
if (getMemberPropertyName(node.callee) !==
|
|
33
|
+
"setCertificateVerifyProc") {
|
|
34
|
+
return;
|
|
35
|
+
}
|
|
36
|
+
const [firstArgument] = node.arguments;
|
|
37
|
+
if (firstArgument === undefined ||
|
|
38
|
+
firstArgument.type === "SpreadElement" ||
|
|
39
|
+
!isFunctionExpression(firstArgument)) {
|
|
40
|
+
return;
|
|
41
|
+
}
|
|
42
|
+
const callbackParameter = arrayAt(firstArgument.params, -1);
|
|
43
|
+
if (callbackParameter?.type !== "Identifier") {
|
|
44
|
+
return;
|
|
45
|
+
}
|
|
46
|
+
if (!hasInsecureCertificateOverride(firstArgument, context, callbackParameter.name)) {
|
|
47
|
+
return;
|
|
48
|
+
}
|
|
49
|
+
context.report({
|
|
50
|
+
messageId: "default",
|
|
51
|
+
node: firstArgument,
|
|
52
|
+
});
|
|
53
|
+
},
|
|
54
|
+
};
|
|
55
|
+
},
|
|
56
|
+
defaultOptions: [],
|
|
57
|
+
meta: {
|
|
58
|
+
deprecated: false,
|
|
59
|
+
docs: {
|
|
60
|
+
description: "disallow Electron certificate verify proc callbacks that accept invalid certificates.",
|
|
61
|
+
frozen: false,
|
|
62
|
+
recommended: false,
|
|
63
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-insecure-certificate-verify-proc",
|
|
64
|
+
},
|
|
65
|
+
messages: {
|
|
66
|
+
default: "Do not override certificate verification by returning/callbacking with 0 in setCertificateVerifyProc handlers.",
|
|
67
|
+
},
|
|
68
|
+
schema: [],
|
|
69
|
+
type: "problem",
|
|
70
|
+
},
|
|
71
|
+
name: "no-electron-insecure-certificate-verify-proc",
|
|
72
|
+
});
|
|
73
|
+
export default rule;
|
|
74
|
+
/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
|
|
75
|
+
//# sourceMappingURL=no-electron-insecure-certificate-verify-proc.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-insecure-certificate-verify-proc.js","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-verify-proc.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,qBAAqB,GAAG,CAC1B,gBAA2C,EACzB,EAAE;IACpB,IACI,CAAC,gBAAgB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EACjD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,IACI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC5C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CACzB,UAA2C,EAGb,EAAE,CAChC,UAAU,CAAC,IAAI,KAAK,yBAAyB;IAC7C,UAAU,CAAC,IAAI,KAAK,oBAAoB,CAAC;AAE7C,MAAM,8BAA8B,GAAG,CACnC,YAEiC,EACjC,OAAoD,EACpD,qBAA6B,EACtB,EAAE;IACT,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,CAAC;IAC1E,wJAAwJ;IACxJ,MAAM,eAAe,GAAG,IAAI,MAAM,CAC9B,MAAM,CAAC,GAAG,CAAA,KAAK,WAAW,aAAa,EACvC,GAAG,CACN,CAAC;IAEF,OAAO,CACH,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACxC,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAC7C,CAAC;AACN,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,IACI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,0BAA0B,EAC5B,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAEvC,IACI,aAAa,KAAK,SAAS;oBAC3B,aAAa,CAAC,IAAI,KAAK,eAAe;oBACtC,CAAC,oBAAoB,CAAC,aAAa,CAAC,EACtC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAE5D,IAAI,iBAAiB,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC3C,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,8BAA8B,CAC3B,aAAa,EACb,OAAO,EACP,iBAAiB,CAAC,IAAI,CACzB,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,aAAa;iBACtB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,uFAAuF;YAC3F,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,0GAA0G;SAClH;QACD,QAAQ,EAAE;YACN,OAAO,EACH,gHAAgH;SACvH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,8CAA8C;CACvD,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"no-electron-insecure-permission-request-handler.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-permission-request-handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqDzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|