eslint-plugin-sdl-2 1.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/CHANGELOG.md +5316 -0
  2. package/LICENSE +21 -0
  3. package/README.md +133 -0
  4. package/dist/_internal/ast-utils.d.ts +17 -0
  5. package/dist/_internal/ast-utils.d.ts.map +1 -0
  6. package/dist/_internal/ast-utils.js +93 -0
  7. package/dist/_internal/ast-utils.js.map +1 -0
  8. package/dist/_internal/config-references.d.ts +5 -0
  9. package/dist/_internal/config-references.d.ts.map +1 -0
  10. package/dist/_internal/config-references.js +13 -0
  11. package/dist/_internal/config-references.js.map +1 -0
  12. package/dist/_internal/create-rule.d.ts +9 -0
  13. package/dist/_internal/create-rule.d.ts.map +1 -0
  14. package/dist/_internal/create-rule.js +6 -0
  15. package/dist/_internal/create-rule.js.map +1 -0
  16. package/dist/_internal/domparser.d.ts +19 -0
  17. package/dist/_internal/domparser.d.ts.map +1 -0
  18. package/dist/_internal/domparser.js +45 -0
  19. package/dist/_internal/domparser.js.map +1 -0
  20. package/dist/_internal/electron-web-preferences.d.ts +14 -0
  21. package/dist/_internal/electron-web-preferences.d.ts.map +1 -0
  22. package/dist/_internal/electron-web-preferences.js +63 -0
  23. package/dist/_internal/electron-web-preferences.js.map +1 -0
  24. package/dist/_internal/estree-utils.d.ts +51 -0
  25. package/dist/_internal/estree-utils.d.ts.map +1 -0
  26. package/dist/_internal/estree-utils.js +112 -0
  27. package/dist/_internal/estree-utils.js.map +1 -0
  28. package/dist/_internal/node-tls-config.d.ts +44 -0
  29. package/dist/_internal/node-tls-config.d.ts.map +1 -0
  30. package/dist/_internal/node-tls-config.js +101 -0
  31. package/dist/_internal/node-tls-config.js.map +1 -0
  32. package/dist/_internal/rules-registry.d.ts +10 -0
  33. package/dist/_internal/rules-registry.d.ts.map +1 -0
  34. package/dist/_internal/rules-registry.js +148 -0
  35. package/dist/_internal/rules-registry.js.map +1 -0
  36. package/dist/_internal/script-element.d.ts +7 -0
  37. package/dist/_internal/script-element.d.ts.map +1 -0
  38. package/dist/_internal/script-element.js +46 -0
  39. package/dist/_internal/script-element.js.map +1 -0
  40. package/dist/_internal/worker-code-loading.d.ts +69 -0
  41. package/dist/_internal/worker-code-loading.d.ts.map +1 -0
  42. package/dist/_internal/worker-code-loading.js +134 -0
  43. package/dist/_internal/worker-code-loading.js.map +1 -0
  44. package/dist/plugin.cjs +6036 -0
  45. package/dist/plugin.cjs.map +7 -0
  46. package/dist/plugin.d.cts +11 -0
  47. package/dist/plugin.d.ts +11 -0
  48. package/dist/plugin.d.ts.map +1 -0
  49. package/dist/plugin.js +235 -0
  50. package/dist/plugin.js.map +1 -0
  51. package/dist/rules/no-angular-bypass-sanitizer.d.ts +5 -0
  52. package/dist/rules/no-angular-bypass-sanitizer.d.ts.map +1 -0
  53. package/dist/rules/no-angular-bypass-sanitizer.js +32 -0
  54. package/dist/rules/no-angular-bypass-sanitizer.js.map +1 -0
  55. package/dist/rules/no-angular-bypass-security-trust-html.d.ts +5 -0
  56. package/dist/rules/no-angular-bypass-security-trust-html.d.ts.map +1 -0
  57. package/dist/rules/no-angular-bypass-security-trust-html.js +51 -0
  58. package/dist/rules/no-angular-bypass-security-trust-html.js.map +1 -0
  59. package/dist/rules/no-angular-innerhtml-binding.d.ts +5 -0
  60. package/dist/rules/no-angular-innerhtml-binding.d.ts.map +1 -0
  61. package/dist/rules/no-angular-innerhtml-binding.js +57 -0
  62. package/dist/rules/no-angular-innerhtml-binding.js.map +1 -0
  63. package/dist/rules/no-angular-sanitization-trusted-urls.d.ts +5 -0
  64. package/dist/rules/no-angular-sanitization-trusted-urls.d.ts.map +1 -0
  65. package/dist/rules/no-angular-sanitization-trusted-urls.js +32 -0
  66. package/dist/rules/no-angular-sanitization-trusted-urls.js.map +1 -0
  67. package/dist/rules/no-angularjs-bypass-sce.d.ts +5 -0
  68. package/dist/rules/no-angularjs-bypass-sce.d.ts.map +1 -0
  69. package/dist/rules/no-angularjs-bypass-sce.js +80 -0
  70. package/dist/rules/no-angularjs-bypass-sce.js.map +1 -0
  71. package/dist/rules/no-angularjs-enable-svg.d.ts +5 -0
  72. package/dist/rules/no-angularjs-enable-svg.d.ts.map +1 -0
  73. package/dist/rules/no-angularjs-enable-svg.js +48 -0
  74. package/dist/rules/no-angularjs-enable-svg.js.map +1 -0
  75. package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.d.ts +5 -0
  76. package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.d.ts.map +1 -0
  77. package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.js +64 -0
  78. package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.js.map +1 -0
  79. package/dist/rules/no-angularjs-sanitization-whitelist.d.ts +5 -0
  80. package/dist/rules/no-angularjs-sanitization-whitelist.d.ts.map +1 -0
  81. package/dist/rules/no-angularjs-sanitization-whitelist.js +32 -0
  82. package/dist/rules/no-angularjs-sanitization-whitelist.js.map +1 -0
  83. package/dist/rules/no-angularjs-sce-resource-url-wildcard.d.ts +5 -0
  84. package/dist/rules/no-angularjs-sce-resource-url-wildcard.d.ts.map +1 -0
  85. package/dist/rules/no-angularjs-sce-resource-url-wildcard.js +69 -0
  86. package/dist/rules/no-angularjs-sce-resource-url-wildcard.js.map +1 -0
  87. package/dist/rules/no-child-process-exec.d.ts +5 -0
  88. package/dist/rules/no-child-process-exec.d.ts.map +1 -0
  89. package/dist/rules/no-child-process-exec.js +141 -0
  90. package/dist/rules/no-child-process-exec.js.map +1 -0
  91. package/dist/rules/no-child-process-shell-true.d.ts +5 -0
  92. package/dist/rules/no-child-process-shell-true.d.ts.map +1 -0
  93. package/dist/rules/no-child-process-shell-true.js +89 -0
  94. package/dist/rules/no-child-process-shell-true.js.map +1 -0
  95. package/dist/rules/no-cookies.d.ts +5 -0
  96. package/dist/rules/no-cookies.d.ts.map +1 -0
  97. package/dist/rules/no-cookies.js +38 -0
  98. package/dist/rules/no-cookies.js.map +1 -0
  99. package/dist/rules/no-document-domain.d.ts +5 -0
  100. package/dist/rules/no-document-domain.d.ts.map +1 -0
  101. package/dist/rules/no-document-domain.js +41 -0
  102. package/dist/rules/no-document-domain.js.map +1 -0
  103. package/dist/rules/no-document-execcommand-insert-html.d.ts +5 -0
  104. package/dist/rules/no-document-execcommand-insert-html.d.ts.map +1 -0
  105. package/dist/rules/no-document-execcommand-insert-html.js +57 -0
  106. package/dist/rules/no-document-execcommand-insert-html.js.map +1 -0
  107. package/dist/rules/no-document-parse-html-unsafe.d.ts +5 -0
  108. package/dist/rules/no-document-parse-html-unsafe.d.ts.map +1 -0
  109. package/dist/rules/no-document-parse-html-unsafe.js +67 -0
  110. package/dist/rules/no-document-parse-html-unsafe.js.map +1 -0
  111. package/dist/rules/no-document-write.d.ts +5 -0
  112. package/dist/rules/no-document-write.d.ts.map +1 -0
  113. package/dist/rules/no-document-write.js +40 -0
  114. package/dist/rules/no-document-write.js.map +1 -0
  115. package/dist/rules/no-domparser-html-without-sanitization.d.ts +5 -0
  116. package/dist/rules/no-domparser-html-without-sanitization.d.ts.map +1 -0
  117. package/dist/rules/no-domparser-html-without-sanitization.js +56 -0
  118. package/dist/rules/no-domparser-html-without-sanitization.js.map +1 -0
  119. package/dist/rules/no-domparser-svg-without-sanitization.d.ts +5 -0
  120. package/dist/rules/no-domparser-svg-without-sanitization.d.ts.map +1 -0
  121. package/dist/rules/no-domparser-svg-without-sanitization.js +56 -0
  122. package/dist/rules/no-domparser-svg-without-sanitization.js.map +1 -0
  123. package/dist/rules/no-dynamic-import-unsafe-url.d.ts +5 -0
  124. package/dist/rules/no-dynamic-import-unsafe-url.d.ts.map +1 -0
  125. package/dist/rules/no-dynamic-import-unsafe-url.js +47 -0
  126. package/dist/rules/no-dynamic-import-unsafe-url.js.map +1 -0
  127. package/dist/rules/no-electron-allow-running-insecure-content.d.ts +5 -0
  128. package/dist/rules/no-electron-allow-running-insecure-content.d.ts.map +1 -0
  129. package/dist/rules/no-electron-allow-running-insecure-content.js +30 -0
  130. package/dist/rules/no-electron-allow-running-insecure-content.js.map +1 -0
  131. package/dist/rules/no-electron-dangerous-blink-features.d.ts +5 -0
  132. package/dist/rules/no-electron-dangerous-blink-features.d.ts.map +1 -0
  133. package/dist/rules/no-electron-dangerous-blink-features.js +89 -0
  134. package/dist/rules/no-electron-dangerous-blink-features.js.map +1 -0
  135. package/dist/rules/no-electron-disable-context-isolation.d.ts +5 -0
  136. package/dist/rules/no-electron-disable-context-isolation.d.ts.map +1 -0
  137. package/dist/rules/no-electron-disable-context-isolation.js +30 -0
  138. package/dist/rules/no-electron-disable-context-isolation.js.map +1 -0
  139. package/dist/rules/no-electron-disable-sandbox.d.ts +5 -0
  140. package/dist/rules/no-electron-disable-sandbox.d.ts.map +1 -0
  141. package/dist/rules/no-electron-disable-sandbox.js +30 -0
  142. package/dist/rules/no-electron-disable-sandbox.js.map +1 -0
  143. package/dist/rules/no-electron-disable-web-security.d.ts +5 -0
  144. package/dist/rules/no-electron-disable-web-security.d.ts.map +1 -0
  145. package/dist/rules/no-electron-disable-web-security.js +30 -0
  146. package/dist/rules/no-electron-disable-web-security.js.map +1 -0
  147. package/dist/rules/no-electron-enable-remote-module.d.ts +5 -0
  148. package/dist/rules/no-electron-enable-remote-module.d.ts.map +1 -0
  149. package/dist/rules/no-electron-enable-remote-module.js +30 -0
  150. package/dist/rules/no-electron-enable-remote-module.js.map +1 -0
  151. package/dist/rules/no-electron-enable-webview-tag.d.ts +5 -0
  152. package/dist/rules/no-electron-enable-webview-tag.d.ts.map +1 -0
  153. package/dist/rules/no-electron-enable-webview-tag.js +30 -0
  154. package/dist/rules/no-electron-enable-webview-tag.js.map +1 -0
  155. package/dist/rules/no-electron-experimental-features.d.ts +5 -0
  156. package/dist/rules/no-electron-experimental-features.d.ts.map +1 -0
  157. package/dist/rules/no-electron-experimental-features.js +30 -0
  158. package/dist/rules/no-electron-experimental-features.js.map +1 -0
  159. package/dist/rules/no-electron-expose-raw-ipc-renderer.d.ts +5 -0
  160. package/dist/rules/no-electron-expose-raw-ipc-renderer.d.ts.map +1 -0
  161. package/dist/rules/no-electron-expose-raw-ipc-renderer.js +108 -0
  162. package/dist/rules/no-electron-expose-raw-ipc-renderer.js.map +1 -0
  163. package/dist/rules/no-electron-insecure-certificate-error-handler.d.ts +5 -0
  164. package/dist/rules/no-electron-insecure-certificate-error-handler.d.ts.map +1 -0
  165. package/dist/rules/no-electron-insecure-certificate-error-handler.js +91 -0
  166. package/dist/rules/no-electron-insecure-certificate-error-handler.js.map +1 -0
  167. package/dist/rules/no-electron-insecure-certificate-verify-proc.d.ts +5 -0
  168. package/dist/rules/no-electron-insecure-certificate-verify-proc.d.ts.map +1 -0
  169. package/dist/rules/no-electron-insecure-certificate-verify-proc.js +75 -0
  170. package/dist/rules/no-electron-insecure-certificate-verify-proc.js.map +1 -0
  171. package/dist/rules/no-electron-insecure-permission-request-handler.d.ts +5 -0
  172. package/dist/rules/no-electron-insecure-permission-request-handler.d.ts.map +1 -0
  173. package/dist/rules/no-electron-insecure-permission-request-handler.js +75 -0
  174. package/dist/rules/no-electron-insecure-permission-request-handler.js.map +1 -0
  175. package/dist/rules/no-electron-node-integration.d.ts +5 -0
  176. package/dist/rules/no-electron-node-integration.d.ts.map +1 -0
  177. package/dist/rules/no-electron-node-integration.js +52 -0
  178. package/dist/rules/no-electron-node-integration.js.map +1 -0
  179. package/dist/rules/no-electron-permission-check-handler-allow-all.d.ts +5 -0
  180. package/dist/rules/no-electron-permission-check-handler-allow-all.d.ts.map +1 -0
  181. package/dist/rules/no-electron-permission-check-handler-allow-all.js +63 -0
  182. package/dist/rules/no-electron-permission-check-handler-allow-all.js.map +1 -0
  183. package/dist/rules/no-electron-unchecked-ipc-sender.d.ts +5 -0
  184. package/dist/rules/no-electron-unchecked-ipc-sender.d.ts.map +1 -0
  185. package/dist/rules/no-electron-unchecked-ipc-sender.js +90 -0
  186. package/dist/rules/no-electron-unchecked-ipc-sender.js.map +1 -0
  187. package/dist/rules/no-electron-unrestricted-navigation.d.ts +5 -0
  188. package/dist/rules/no-electron-unrestricted-navigation.d.ts.map +1 -0
  189. package/dist/rules/no-electron-unrestricted-navigation.js +100 -0
  190. package/dist/rules/no-electron-unrestricted-navigation.js.map +1 -0
  191. package/dist/rules/no-electron-untrusted-open-external.d.ts +5 -0
  192. package/dist/rules/no-electron-untrusted-open-external.d.ts.map +1 -0
  193. package/dist/rules/no-electron-untrusted-open-external.js +92 -0
  194. package/dist/rules/no-electron-untrusted-open-external.js.map +1 -0
  195. package/dist/rules/no-electron-webview-allowpopups.d.ts +5 -0
  196. package/dist/rules/no-electron-webview-allowpopups.d.ts.map +1 -0
  197. package/dist/rules/no-electron-webview-allowpopups.js +85 -0
  198. package/dist/rules/no-electron-webview-allowpopups.js.map +1 -0
  199. package/dist/rules/no-electron-webview-insecure-webpreferences.d.ts +5 -0
  200. package/dist/rules/no-electron-webview-insecure-webpreferences.d.ts.map +1 -0
  201. package/dist/rules/no-electron-webview-insecure-webpreferences.js +88 -0
  202. package/dist/rules/no-electron-webview-insecure-webpreferences.js.map +1 -0
  203. package/dist/rules/no-electron-webview-node-integration.d.ts +5 -0
  204. package/dist/rules/no-electron-webview-node-integration.d.ts.map +1 -0
  205. package/dist/rules/no-electron-webview-node-integration.js +107 -0
  206. package/dist/rules/no-electron-webview-node-integration.js.map +1 -0
  207. package/dist/rules/no-html-method.d.ts +5 -0
  208. package/dist/rules/no-html-method.d.ts.map +1 -0
  209. package/dist/rules/no-html-method.js +42 -0
  210. package/dist/rules/no-html-method.js.map +1 -0
  211. package/dist/rules/no-http-request-to-insecure-protocol.d.ts +5 -0
  212. package/dist/rules/no-http-request-to-insecure-protocol.d.ts.map +1 -0
  213. package/dist/rules/no-http-request-to-insecure-protocol.js +94 -0
  214. package/dist/rules/no-http-request-to-insecure-protocol.js.map +1 -0
  215. package/dist/rules/no-iframe-srcdoc.d.ts +5 -0
  216. package/dist/rules/no-iframe-srcdoc.d.ts.map +1 -0
  217. package/dist/rules/no-iframe-srcdoc.js +144 -0
  218. package/dist/rules/no-iframe-srcdoc.js.map +1 -0
  219. package/dist/rules/no-inner-html.d.ts +5 -0
  220. package/dist/rules/no-inner-html.d.ts.map +1 -0
  221. package/dist/rules/no-inner-html.js +67 -0
  222. package/dist/rules/no-inner-html.js.map +1 -0
  223. package/dist/rules/no-insecure-random.d.ts +5 -0
  224. package/dist/rules/no-insecure-random.d.ts.map +1 -0
  225. package/dist/rules/no-insecure-random.js +95 -0
  226. package/dist/rules/no-insecure-random.js.map +1 -0
  227. package/dist/rules/no-insecure-tls-agent-options.d.ts +5 -0
  228. package/dist/rules/no-insecure-tls-agent-options.d.ts.map +1 -0
  229. package/dist/rules/no-insecure-tls-agent-options.js +73 -0
  230. package/dist/rules/no-insecure-tls-agent-options.js.map +1 -0
  231. package/dist/rules/no-insecure-url.d.ts +12 -0
  232. package/dist/rules/no-insecure-url.d.ts.map +1 -0
  233. package/dist/rules/no-insecure-url.js +142 -0
  234. package/dist/rules/no-insecure-url.js.map +1 -0
  235. package/dist/rules/no-location-javascript-url.d.ts +5 -0
  236. package/dist/rules/no-location-javascript-url.d.ts.map +1 -0
  237. package/dist/rules/no-location-javascript-url.js +98 -0
  238. package/dist/rules/no-location-javascript-url.js.map +1 -0
  239. package/dist/rules/no-message-event-without-origin-check.d.ts +5 -0
  240. package/dist/rules/no-message-event-without-origin-check.d.ts.map +1 -0
  241. package/dist/rules/no-message-event-without-origin-check.js +183 -0
  242. package/dist/rules/no-message-event-without-origin-check.js.map +1 -0
  243. package/dist/rules/no-msapp-exec-unsafe.d.ts +5 -0
  244. package/dist/rules/no-msapp-exec-unsafe.d.ts.map +1 -0
  245. package/dist/rules/no-msapp-exec-unsafe.js +32 -0
  246. package/dist/rules/no-msapp-exec-unsafe.js.map +1 -0
  247. package/dist/rules/no-node-tls-check-server-identity-bypass.d.ts +5 -0
  248. package/dist/rules/no-node-tls-check-server-identity-bypass.d.ts.map +1 -0
  249. package/dist/rules/no-node-tls-check-server-identity-bypass.js +95 -0
  250. package/dist/rules/no-node-tls-check-server-identity-bypass.js.map +1 -0
  251. package/dist/rules/no-node-tls-legacy-protocol.d.ts +5 -0
  252. package/dist/rules/no-node-tls-legacy-protocol.d.ts.map +1 -0
  253. package/dist/rules/no-node-tls-legacy-protocol.js +106 -0
  254. package/dist/rules/no-node-tls-legacy-protocol.js.map +1 -0
  255. package/dist/rules/no-node-tls-reject-unauthorized-zero.d.ts +5 -0
  256. package/dist/rules/no-node-tls-reject-unauthorized-zero.d.ts.map +1 -0
  257. package/dist/rules/no-node-tls-reject-unauthorized-zero.js +93 -0
  258. package/dist/rules/no-node-tls-reject-unauthorized-zero.js.map +1 -0
  259. package/dist/rules/no-node-tls-security-level-zero.d.ts +5 -0
  260. package/dist/rules/no-node-tls-security-level-zero.d.ts.map +1 -0
  261. package/dist/rules/no-node-tls-security-level-zero.js +80 -0
  262. package/dist/rules/no-node-tls-security-level-zero.js.map +1 -0
  263. package/dist/rules/no-node-vm-run-in-context.d.ts +5 -0
  264. package/dist/rules/no-node-vm-run-in-context.d.ts.map +1 -0
  265. package/dist/rules/no-node-vm-run-in-context.js +186 -0
  266. package/dist/rules/no-node-vm-run-in-context.js.map +1 -0
  267. package/dist/rules/no-node-vm-source-text-module.d.ts +5 -0
  268. package/dist/rules/no-node-vm-source-text-module.d.ts.map +1 -0
  269. package/dist/rules/no-node-vm-source-text-module.js +126 -0
  270. package/dist/rules/no-node-vm-source-text-module.js.map +1 -0
  271. package/dist/rules/no-node-worker-threads-eval.d.ts +5 -0
  272. package/dist/rules/no-node-worker-threads-eval.d.ts.map +1 -0
  273. package/dist/rules/no-node-worker-threads-eval.js +151 -0
  274. package/dist/rules/no-node-worker-threads-eval.js.map +1 -0
  275. package/dist/rules/no-nonnull-assertion-on-security-input.d.ts +5 -0
  276. package/dist/rules/no-nonnull-assertion-on-security-input.d.ts.map +1 -0
  277. package/dist/rules/no-nonnull-assertion-on-security-input.js +48 -0
  278. package/dist/rules/no-nonnull-assertion-on-security-input.js.map +1 -0
  279. package/dist/rules/no-postmessage-star-origin.d.ts +5 -0
  280. package/dist/rules/no-postmessage-star-origin.d.ts.map +1 -0
  281. package/dist/rules/no-postmessage-star-origin.js +58 -0
  282. package/dist/rules/no-postmessage-star-origin.js.map +1 -0
  283. package/dist/rules/no-postmessage-without-origin-allowlist.d.ts +5 -0
  284. package/dist/rules/no-postmessage-without-origin-allowlist.d.ts.map +1 -0
  285. package/dist/rules/no-postmessage-without-origin-allowlist.js +80 -0
  286. package/dist/rules/no-postmessage-without-origin-allowlist.js.map +1 -0
  287. package/dist/rules/no-range-create-contextual-fragment.d.ts +5 -0
  288. package/dist/rules/no-range-create-contextual-fragment.d.ts.map +1 -0
  289. package/dist/rules/no-range-create-contextual-fragment.js +64 -0
  290. package/dist/rules/no-range-create-contextual-fragment.js.map +1 -0
  291. package/dist/rules/no-script-src-data-url.d.ts +5 -0
  292. package/dist/rules/no-script-src-data-url.d.ts.map +1 -0
  293. package/dist/rules/no-script-src-data-url.js +108 -0
  294. package/dist/rules/no-script-src-data-url.js.map +1 -0
  295. package/dist/rules/no-script-text.d.ts +5 -0
  296. package/dist/rules/no-script-text.d.ts.map +1 -0
  297. package/dist/rules/no-script-text.js +52 -0
  298. package/dist/rules/no-script-text.js.map +1 -0
  299. package/dist/rules/no-service-worker-unsafe-script-url.d.ts +5 -0
  300. package/dist/rules/no-service-worker-unsafe-script-url.d.ts.map +1 -0
  301. package/dist/rules/no-service-worker-unsafe-script-url.js +52 -0
  302. package/dist/rules/no-service-worker-unsafe-script-url.js.map +1 -0
  303. package/dist/rules/no-set-html-unsafe.d.ts +5 -0
  304. package/dist/rules/no-set-html-unsafe.d.ts.map +1 -0
  305. package/dist/rules/no-set-html-unsafe.js +48 -0
  306. package/dist/rules/no-set-html-unsafe.js.map +1 -0
  307. package/dist/rules/no-trusted-types-policy-pass-through.d.ts +5 -0
  308. package/dist/rules/no-trusted-types-policy-pass-through.d.ts.map +1 -0
  309. package/dist/rules/no-trusted-types-policy-pass-through.js +115 -0
  310. package/dist/rules/no-trusted-types-policy-pass-through.js.map +1 -0
  311. package/dist/rules/no-unsafe-alloc.d.ts +5 -0
  312. package/dist/rules/no-unsafe-alloc.d.ts.map +1 -0
  313. package/dist/rules/no-unsafe-alloc.js +51 -0
  314. package/dist/rules/no-unsafe-alloc.js.map +1 -0
  315. package/dist/rules/no-unsafe-cast-to-trusted-types.d.ts +5 -0
  316. package/dist/rules/no-unsafe-cast-to-trusted-types.d.ts.map +1 -0
  317. package/dist/rules/no-unsafe-cast-to-trusted-types.js +89 -0
  318. package/dist/rules/no-unsafe-cast-to-trusted-types.js.map +1 -0
  319. package/dist/rules/no-window-open-without-noopener.d.ts +5 -0
  320. package/dist/rules/no-window-open-without-noopener.d.ts.map +1 -0
  321. package/dist/rules/no-window-open-without-noopener.js +84 -0
  322. package/dist/rules/no-window-open-without-noopener.js.map +1 -0
  323. package/dist/rules/no-winjs-html-unsafe.d.ts +5 -0
  324. package/dist/rules/no-winjs-html-unsafe.d.ts.map +1 -0
  325. package/dist/rules/no-winjs-html-unsafe.js +32 -0
  326. package/dist/rules/no-winjs-html-unsafe.js.map +1 -0
  327. package/dist/rules/no-worker-blob-url.d.ts +5 -0
  328. package/dist/rules/no-worker-blob-url.d.ts.map +1 -0
  329. package/dist/rules/no-worker-blob-url.js +64 -0
  330. package/dist/rules/no-worker-blob-url.js.map +1 -0
  331. package/dist/rules/no-worker-data-url.d.ts +5 -0
  332. package/dist/rules/no-worker-data-url.d.ts.map +1 -0
  333. package/dist/rules/no-worker-data-url.js +67 -0
  334. package/dist/rules/no-worker-data-url.js.map +1 -0
  335. package/docs/rules/getting-started.md +70 -0
  336. package/docs/rules/no-angular-bypass-sanitizer.md +69 -0
  337. package/docs/rules/no-angular-bypass-security-trust-html.md +59 -0
  338. package/docs/rules/no-angular-innerhtml-binding.md +59 -0
  339. package/docs/rules/no-angular-sanitization-trusted-urls.md +64 -0
  340. package/docs/rules/no-angularjs-bypass-sce.md +64 -0
  341. package/docs/rules/no-angularjs-enable-svg.md +59 -0
  342. package/docs/rules/no-angularjs-ng-bind-html-without-sanitize.md +59 -0
  343. package/docs/rules/no-angularjs-sanitization-whitelist.md +63 -0
  344. package/docs/rules/no-angularjs-sce-resource-url-wildcard.md +62 -0
  345. package/docs/rules/no-child-process-exec.md +101 -0
  346. package/docs/rules/no-child-process-shell-true.md +59 -0
  347. package/docs/rules/no-cookies.md +61 -0
  348. package/docs/rules/no-document-domain.md +59 -0
  349. package/docs/rules/no-document-execcommand-insert-html.md +69 -0
  350. package/docs/rules/no-document-parse-html-unsafe.md +72 -0
  351. package/docs/rules/no-document-write.md +64 -0
  352. package/docs/rules/no-domparser-html-without-sanitization.md +59 -0
  353. package/docs/rules/no-domparser-svg-without-sanitization.md +71 -0
  354. package/docs/rules/no-dynamic-import-unsafe-url.md +81 -0
  355. package/docs/rules/no-electron-allow-running-insecure-content.md +69 -0
  356. package/docs/rules/no-electron-dangerous-blink-features.md +77 -0
  357. package/docs/rules/no-electron-disable-context-isolation.md +69 -0
  358. package/docs/rules/no-electron-disable-sandbox.md +69 -0
  359. package/docs/rules/no-electron-disable-web-security.md +69 -0
  360. package/docs/rules/no-electron-enable-remote-module.md +69 -0
  361. package/docs/rules/no-electron-enable-webview-tag.md +77 -0
  362. package/docs/rules/no-electron-experimental-features.md +77 -0
  363. package/docs/rules/no-electron-expose-raw-ipc-renderer.md +79 -0
  364. package/docs/rules/no-electron-insecure-certificate-error-handler.md +72 -0
  365. package/docs/rules/no-electron-insecure-certificate-verify-proc.md +63 -0
  366. package/docs/rules/no-electron-insecure-permission-request-handler.md +67 -0
  367. package/docs/rules/no-electron-node-integration.md +70 -0
  368. package/docs/rules/no-electron-permission-check-handler-allow-all.md +66 -0
  369. package/docs/rules/no-electron-unchecked-ipc-sender.md +62 -0
  370. package/docs/rules/no-electron-unrestricted-navigation.md +64 -0
  371. package/docs/rules/no-electron-untrusted-open-external.md +65 -0
  372. package/docs/rules/no-electron-webview-allowpopups.md +59 -0
  373. package/docs/rules/no-electron-webview-insecure-webpreferences.md +84 -0
  374. package/docs/rules/no-electron-webview-node-integration.md +59 -0
  375. package/docs/rules/no-html-method.md +58 -0
  376. package/docs/rules/no-http-request-to-insecure-protocol.md +59 -0
  377. package/docs/rules/no-iframe-srcdoc.md +76 -0
  378. package/docs/rules/no-inner-html.md +65 -0
  379. package/docs/rules/no-insecure-random.md +66 -0
  380. package/docs/rules/no-insecure-tls-agent-options.md +59 -0
  381. package/docs/rules/no-insecure-url.md +72 -0
  382. package/docs/rules/no-location-javascript-url.md +59 -0
  383. package/docs/rules/no-message-event-without-origin-check.md +82 -0
  384. package/docs/rules/no-msapp-exec-unsafe.md +59 -0
  385. package/docs/rules/no-node-tls-check-server-identity-bypass.md +88 -0
  386. package/docs/rules/no-node-tls-legacy-protocol.md +80 -0
  387. package/docs/rules/no-node-tls-reject-unauthorized-zero.md +61 -0
  388. package/docs/rules/no-node-tls-security-level-zero.md +77 -0
  389. package/docs/rules/no-node-vm-run-in-context.md +89 -0
  390. package/docs/rules/no-node-vm-source-text-module.md +79 -0
  391. package/docs/rules/no-node-worker-threads-eval.md +82 -0
  392. package/docs/rules/no-nonnull-assertion-on-security-input.md +59 -0
  393. package/docs/rules/no-postmessage-star-origin.md +59 -0
  394. package/docs/rules/no-postmessage-without-origin-allowlist.md +59 -0
  395. package/docs/rules/no-range-create-contextual-fragment.md +64 -0
  396. package/docs/rules/no-script-src-data-url.md +83 -0
  397. package/docs/rules/no-script-text.md +80 -0
  398. package/docs/rules/no-service-worker-unsafe-script-url.md +85 -0
  399. package/docs/rules/no-set-html-unsafe.md +64 -0
  400. package/docs/rules/no-trusted-types-policy-pass-through.md +68 -0
  401. package/docs/rules/no-unsafe-alloc.md +62 -0
  402. package/docs/rules/no-unsafe-cast-to-trusted-types.md +59 -0
  403. package/docs/rules/no-window-open-without-noopener.md +63 -0
  404. package/docs/rules/no-winjs-html-unsafe.md +60 -0
  405. package/docs/rules/no-worker-blob-url.md +86 -0
  406. package/docs/rules/no-worker-data-url.md +85 -0
  407. package/docs/rules/overview.md +111 -0
  408. package/docs/rules/presets/angular.md +35 -0
  409. package/docs/rules/presets/angularjs.md +36 -0
  410. package/docs/rules/presets/common.md +59 -0
  411. package/docs/rules/presets/electron.md +51 -0
  412. package/docs/rules/presets/index.md +26 -0
  413. package/docs/rules/presets/node.md +43 -0
  414. package/docs/rules/presets/react.md +33 -0
  415. package/docs/rules/presets/recommended.md +104 -0
  416. package/docs/rules/presets/required.md +99 -0
  417. package/docs/rules/presets/typescript.md +34 -0
  418. package/package.json +583 -0
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-disable-sandbox.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-disable-sandbox.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-disable-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
3
+ /** Rule implementation. */
4
+ const rule = createRule({
5
+ create(context) {
6
+ return createElectronWebPreferencesBooleanListener(context, {
7
+ disallowedValue: false,
8
+ preferenceName: "sandbox",
9
+ });
10
+ },
11
+ defaultOptions: [],
12
+ meta: {
13
+ deprecated: false,
14
+ docs: {
15
+ description: "disallow disabling Electron sandbox in webPreferences.",
16
+ frozen: false,
17
+ recommended: false,
18
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-disable-sandbox",
19
+ },
20
+ fixable: "code",
21
+ messages: {
22
+ default: "Do not set webPreferences.sandbox to false.",
23
+ },
24
+ schema: [],
25
+ type: "problem",
26
+ },
27
+ name: "no-electron-disable-sandbox",
28
+ });
29
+ export default rule;
30
+ //# sourceMappingURL=no-electron-disable-sandbox.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-disable-sandbox.js","sourceRoot":"","sources":["../../src/rules/no-electron-disable-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,SAAS;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,wDAAwD;YAC5D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,yFAAyF;SACjG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,6CAA6C;SACzD;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,6BAA6B;CACtC,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-disable-web-security.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-disable-web-security.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-disable-web-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
3
+ /** Rule implementation. */
4
+ const rule = createRule({
5
+ create(context) {
6
+ return createElectronWebPreferencesBooleanListener(context, {
7
+ disallowedValue: false,
8
+ preferenceName: "webSecurity",
9
+ });
10
+ },
11
+ defaultOptions: [],
12
+ meta: {
13
+ deprecated: false,
14
+ docs: {
15
+ description: "disallow disabling webSecurity in Electron webPreferences.",
16
+ frozen: false,
17
+ recommended: false,
18
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-disable-web-security",
19
+ },
20
+ fixable: "code",
21
+ messages: {
22
+ default: "Do not set webPreferences.webSecurity to false.",
23
+ },
24
+ schema: [],
25
+ type: "problem",
26
+ },
27
+ name: "no-electron-disable-web-security",
28
+ });
29
+ export default rule;
30
+ //# sourceMappingURL=no-electron-disable-web-security.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-disable-web-security.js","sourceRoot":"","sources":["../../src/rules/no-electron-disable-web-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,aAAa;SAChC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,4DAA4D;YAChE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,8FAA8F;SACtG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,iDAAiD;SAC7D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,kCAAkC;CAC3C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-enable-remote-module.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-enable-remote-module.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-enable-remote-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
3
+ /** Rule implementation. */
4
+ const rule = createRule({
5
+ create(context) {
6
+ return createElectronWebPreferencesBooleanListener(context, {
7
+ disallowedValue: true,
8
+ preferenceName: "enableRemoteModule",
9
+ });
10
+ },
11
+ defaultOptions: [],
12
+ meta: {
13
+ deprecated: false,
14
+ docs: {
15
+ description: "disallow enabling enableRemoteModule in Electron webPreferences.",
16
+ frozen: false,
17
+ recommended: false,
18
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-enable-remote-module",
19
+ },
20
+ fixable: "code",
21
+ messages: {
22
+ default: "Do not set webPreferences.enableRemoteModule to true.",
23
+ },
24
+ schema: [],
25
+ type: "problem",
26
+ },
27
+ name: "no-electron-enable-remote-module",
28
+ });
29
+ export default rule;
30
+ //# sourceMappingURL=no-electron-enable-remote-module.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-enable-remote-module.js","sourceRoot":"","sources":["../../src/rules/no-electron-enable-remote-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,oBAAoB;SACvC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,kEAAkE;YACtE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,8FAA8F;SACtG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,uDAAuD;SACnE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,kCAAkC;CAC3C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-enable-webview-tag.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-enable-webview-tag.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-enable-webview-tag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
3
+ /** Rule implementation. */
4
+ const rule = createRule({
5
+ create(context) {
6
+ return createElectronWebPreferencesBooleanListener(context, {
7
+ disallowedValue: true,
8
+ preferenceName: "webviewTag",
9
+ });
10
+ },
11
+ defaultOptions: [],
12
+ meta: {
13
+ deprecated: false,
14
+ docs: {
15
+ description: "disallow enabling Electron webPreferences.webviewTag.",
16
+ frozen: false,
17
+ recommended: false,
18
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-enable-webview-tag",
19
+ },
20
+ fixable: "code",
21
+ messages: {
22
+ default: "Do not set webPreferences.webviewTag to true.",
23
+ },
24
+ schema: [],
25
+ type: "problem",
26
+ },
27
+ name: "no-electron-enable-webview-tag",
28
+ });
29
+ export default rule;
30
+ //# sourceMappingURL=no-electron-enable-webview-tag.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-enable-webview-tag.js","sourceRoot":"","sources":["../../src/rules/no-electron-enable-webview-tag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,YAAY;SAC/B,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,uDAAuD;YAC3D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,4FAA4F;SACpG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,+CAA+C;SAC3D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,gCAAgC;CACzC,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-experimental-features.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-experimental-features.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-experimental-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAyBtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { createElectronWebPreferencesBooleanListener } from "../_internal/electron-web-preferences.js";
3
+ /** Rule implementation. */
4
+ const rule = createRule({
5
+ create(context) {
6
+ return createElectronWebPreferencesBooleanListener(context, {
7
+ disallowedValue: true,
8
+ preferenceName: "experimentalFeatures",
9
+ });
10
+ },
11
+ defaultOptions: [],
12
+ meta: {
13
+ deprecated: false,
14
+ docs: {
15
+ description: "disallow enabling Electron webPreferences.experimentalFeatures.",
16
+ frozen: false,
17
+ recommended: false,
18
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-experimental-features",
19
+ },
20
+ fixable: "code",
21
+ messages: {
22
+ default: "Do not set webPreferences.experimentalFeatures to true.",
23
+ },
24
+ schema: [],
25
+ type: "problem",
26
+ },
27
+ name: "no-electron-experimental-features",
28
+ });
29
+ export default rule;
30
+ //# sourceMappingURL=no-electron-experimental-features.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-experimental-features.js","sourceRoot":"","sources":["../../src/rules/no-electron-experimental-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,2CAA2C,EAAE,MAAM,0CAA0C,CAAC;AAIvG,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO,2CAA2C,CAAC,OAAO,EAAE;YACxD,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,sBAAsB;SACzC,CAAC,CAAC;IACP,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,iEAAiE;YACrE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,+FAA+F;SACvG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,yDAAyD;SACrE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,mCAAmC;CAC5C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-expose-raw-ipc-renderer.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-expose-raw-ipc-renderer.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-expose-raw-ipc-renderer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqGzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CA2CtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,108 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ import { getMemberPropertyName } from "../_internal/estree-utils.js";
3
+ const isExpressionNode = (node) => node.type !== "ArrayPattern" &&
4
+ node.type !== "AssignmentPattern" &&
5
+ node.type !== "ObjectPattern";
6
+ const isContextBridgeObjectExpression = (expression) => {
7
+ if (expression.type === "Identifier") {
8
+ return expression.name === "contextBridge";
9
+ }
10
+ if (expression.type !== "MemberExpression") {
11
+ return false;
12
+ }
13
+ return getMemberPropertyName(expression) === "contextBridge";
14
+ };
15
+ const isContextBridgeExposeCall = (node) => {
16
+ if (node.callee.type !== "MemberExpression") {
17
+ return false;
18
+ }
19
+ const methodName = getMemberPropertyName(node.callee);
20
+ if (methodName !== "exposeInIsolatedWorld" &&
21
+ methodName !== "exposeInMainWorld") {
22
+ return false;
23
+ }
24
+ return isContextBridgeObjectExpression(node.callee.object);
25
+ };
26
+ const isIpcRendererReference = (expression) => {
27
+ if (expression.type === "Identifier") {
28
+ return expression.name === "ipcRenderer";
29
+ }
30
+ if (expression.type !== "MemberExpression") {
31
+ return false;
32
+ }
33
+ if (expression.object.type === "Identifier") {
34
+ return expression.object.name === "ipcRenderer";
35
+ }
36
+ if (expression.object.type !== "MemberExpression") {
37
+ return false;
38
+ }
39
+ return getMemberPropertyName(expression.object) === "ipcRenderer";
40
+ };
41
+ const isUnsafeExposedValue = (expression) => {
42
+ if (isIpcRendererReference(expression)) {
43
+ return true;
44
+ }
45
+ if (expression.type === "CallExpression" &&
46
+ expression.callee.type === "MemberExpression" &&
47
+ getMemberPropertyName(expression.callee) === "bind" &&
48
+ expression.callee.object.type === "MemberExpression") {
49
+ return isIpcRendererReference(expression.callee.object);
50
+ }
51
+ if (expression.type === "ArrayExpression") {
52
+ return expression.elements.some((element) => element !== null &&
53
+ element.type !== "SpreadElement" &&
54
+ isUnsafeExposedValue(element));
55
+ }
56
+ if (expression.type !== "ObjectExpression") {
57
+ return false;
58
+ }
59
+ return expression.properties.some((propertyNode) => {
60
+ if (propertyNode.type === "SpreadElement") {
61
+ return isUnsafeExposedValue(propertyNode.argument);
62
+ }
63
+ return (propertyNode.kind === "init" &&
64
+ isExpressionNode(propertyNode.value) &&
65
+ isUnsafeExposedValue(propertyNode.value));
66
+ });
67
+ };
68
+ /** Rule implementation. */
69
+ const rule = createRule({
70
+ create(context) {
71
+ return {
72
+ CallExpression(node) {
73
+ if (!isContextBridgeExposeCall(node)) {
74
+ return;
75
+ }
76
+ const [, exposedValue] = node.arguments;
77
+ if (exposedValue === undefined ||
78
+ exposedValue.type === "SpreadElement" ||
79
+ !isUnsafeExposedValue(exposedValue)) {
80
+ return;
81
+ }
82
+ context.report({
83
+ messageId: "default",
84
+ node: exposedValue,
85
+ });
86
+ },
87
+ };
88
+ },
89
+ defaultOptions: [],
90
+ meta: {
91
+ deprecated: false,
92
+ docs: {
93
+ description: "disallow exposing raw Electron ipcRenderer objects or methods through contextBridge APIs.",
94
+ frozen: false,
95
+ recommended: false,
96
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-expose-raw-ipc-renderer",
97
+ },
98
+ messages: {
99
+ default: "Expose narrow preload wrapper functions instead of raw ipcRenderer objects or methods.",
100
+ },
101
+ schema: [],
102
+ type: "problem",
103
+ },
104
+ name: "no-electron-expose-raw-ipc-renderer",
105
+ });
106
+ export default rule;
107
+ /* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
108
+ //# sourceMappingURL=no-electron-expose-raw-ipc-renderer.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-expose-raw-ipc-renderer.js","sourceRoot":"","sources":["../../src/rules/no-electron-expose-raw-ipc-renderer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAIrE,MAAM,gBAAgB,GAAG,CAAC,IAAmB,EAA+B,EAAE,CAC1E,IAAI,CAAC,IAAI,KAAK,cAAc;IAC5B,IAAI,CAAC,IAAI,KAAK,mBAAmB;IACjC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC;AAElC,MAAM,+BAA+B,GAAG,CACpC,UAA+B,EACxB,EAAE;IACT,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,qBAAqB,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,IAA6B,EAAW,EAAE;IACzE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtD,IACI,UAAU,KAAK,uBAAuB;QACtC,UAAU,KAAK,mBAAmB,EACpC,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,UAA+B,EAAW,EAAE;IACxE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,KAAK,aAAa,CAAC;IAC7C,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,UAA+B,EAAW,EAAE;IACtE,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IACI,UAAU,CAAC,IAAI,KAAK,gBAAgB;QACpC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;QAC7C,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM;QACnD,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EACtD,CAAC;QACC,OAAO,sBAAsB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAkC,EAAE,CACxC,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,oBAAoB,CAAC,OAAO,CAAC,CACpC,CAAC;IACN,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;QAC/C,IAAI,YAAY,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACxC,OAAO,oBAAoB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,CACH,YAAY,CAAC,IAAI,KAAK,MAAM;YAC5B,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC;YACpC,oBAAoB,CAAC,YAAY,CAAC,KAAK,CAAC,CAC3C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAExC,IACI,YAAY,KAAK,SAAS;oBAC1B,YAAY,CAAC,IAAI,KAAK,eAAe;oBACrC,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACrC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,YAAY;iBACrB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,2FAA2F;YAC/F,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,iGAAiG;SACzG;QACD,QAAQ,EAAE;YACN,OAAO,EACH,wFAAwF;SAC/F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,qCAAqC;CAC9C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-insecure-certificate-error-handler.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-insecure-certificate-error-handler.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-error-handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAsEzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,91 @@
1
+ import { arrayAt, arrayFirst } from "ts-extras";
2
+ import { createRule } from "../_internal/create-rule.js";
3
+ const getStaticStringValue = (node) => {
4
+ if (node.type === "Literal" && typeof node.value === "string") {
5
+ return node.value;
6
+ }
7
+ if (node.type === "TemplateLiteral" && node.expressions.length === 0) {
8
+ return arrayFirst(node.quasis)?.value.cooked ?? undefined;
9
+ }
10
+ return undefined;
11
+ };
12
+ const isOnMemberExpression = (callee) => {
13
+ if (callee.type !== "MemberExpression" || callee.computed) {
14
+ return false;
15
+ }
16
+ return (callee.property.type === "Identifier" && callee.property.name === "on");
17
+ };
18
+ const getCallbackParameterName = (node) => {
19
+ const callbackParameter = arrayAt(node.params, -1);
20
+ return callbackParameter?.type === "Identifier"
21
+ ? callbackParameter.name
22
+ : undefined;
23
+ };
24
+ const toUnsafeCallbackTruePattern = (callbackName) =>
25
+ // eslint-disable-next-line security/detect-non-literal-regexp -- Callback identifier is static source text and safely interpolated for targeted pattern matching.
26
+ new RegExp(String.raw `\b${callbackName}\s*\(\s*true\b`, "u");
27
+ const hasUnsafeCallbackTrueCall = (callbackName, handlerNode, context) => {
28
+ const handlerSourceText = context.sourceCode.getText(handlerNode);
29
+ return toUnsafeCallbackTruePattern(callbackName).test(handlerSourceText);
30
+ };
31
+ const isCertificateErrorEventRegistration = (node) => {
32
+ if (!isOnMemberExpression(node.callee)) {
33
+ return false;
34
+ }
35
+ const [firstArgument] = node.arguments;
36
+ if (firstArgument === undefined || firstArgument.type === "SpreadElement") {
37
+ return false;
38
+ }
39
+ return getStaticStringValue(firstArgument) === "certificate-error";
40
+ };
41
+ /** Rule implementation. */
42
+ const rule = createRule({
43
+ create(context) {
44
+ return {
45
+ CallExpression(node) {
46
+ if (!isCertificateErrorEventRegistration(node)) {
47
+ return;
48
+ }
49
+ const [, secondArgument] = node.arguments;
50
+ if (secondArgument === undefined ||
51
+ secondArgument.type === "SpreadElement") {
52
+ return;
53
+ }
54
+ if (secondArgument.type !== "ArrowFunctionExpression" &&
55
+ secondArgument.type !== "FunctionExpression") {
56
+ return;
57
+ }
58
+ const callbackParameterName = getCallbackParameterName(secondArgument);
59
+ if (typeof callbackParameterName !== "string") {
60
+ return;
61
+ }
62
+ if (!hasUnsafeCallbackTrueCall(callbackParameterName, secondArgument, context)) {
63
+ return;
64
+ }
65
+ context.report({
66
+ messageId: "default",
67
+ node: secondArgument,
68
+ });
69
+ },
70
+ };
71
+ },
72
+ defaultOptions: [],
73
+ meta: {
74
+ deprecated: false,
75
+ docs: {
76
+ description: "disallow Electron certificate-error handlers that call the callback with true.",
77
+ frozen: false,
78
+ recommended: false,
79
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-insecure-certificate-error-handler",
80
+ },
81
+ messages: {
82
+ default: "Do not bypass certificate validation by calling the certificate-error callback with true.",
83
+ },
84
+ schema: [],
85
+ type: "problem",
86
+ },
87
+ name: "no-electron-insecure-certificate-error-handler",
88
+ });
89
+ export default rule;
90
+ /* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
91
+ //# sourceMappingURL=no-electron-insecure-certificate-error-handler.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-insecure-certificate-error-handler.js","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-error-handler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,oBAAoB,GAAG,CACzB,IAAyB,EACP,EAAE;IACpB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;IAC9D,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CACzB,MAAyC,EAClC,EAAE;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CACH,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CACzE,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC7B,IAAoE,EAClD,EAAE;IACpB,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,iBAAiB,EAAE,IAAI,KAAK,YAAY;QAC3C,CAAC,CAAC,iBAAiB,CAAC,IAAI;QACxB,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,YAAoB,EAAU,EAAE;AACjE,kKAAkK;AAClK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,YAAY,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAEjE,MAAM,yBAAyB,GAAG,CAC9B,YAAoB,EACpB,WAA2E,EAC3E,OAAoD,EAC7C,EAAE;IACT,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAElE,OAAO,2BAA2B,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CACxC,IAA6B,EACtB,EAAE;IACT,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAEvC,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,oBAAoB,CAAC,aAAa,CAAC,KAAK,mBAAmB,CAAC;AACvE,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAE1C,IACI,cAAc,KAAK,SAAS;oBAC5B,cAAc,CAAC,IAAI,KAAK,eAAe,EACzC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IACI,cAAc,CAAC,IAAI,KAAK,yBAAyB;oBACjD,cAAc,CAAC,IAAI,KAAK,oBAAoB,EAC9C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,qBAAqB,GACvB,wBAAwB,CAAC,cAAc,CAAC,CAAC;gBAE7C,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;oBAC5C,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,yBAAyB,CACtB,qBAAqB,EACrB,cAAc,EACd,OAAO,CACV,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,cAAc;iBACvB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,gFAAgF;YACpF,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,4GAA4G;SACpH;QACD,QAAQ,EAAE;YACN,OAAO,EACH,2FAA2F;SAClG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,gDAAgD;CACzD,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-insecure-certificate-verify-proc.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-insecure-certificate-verify-proc.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-verify-proc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqDzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
@@ -0,0 +1,75 @@
1
+ import { arrayAt } from "ts-extras";
2
+ import { createRule } from "../_internal/create-rule.js";
3
+ const getMemberPropertyName = (memberExpression) => {
4
+ if (!memberExpression.computed &&
5
+ memberExpression.property.type === "Identifier") {
6
+ return memberExpression.property.name;
7
+ }
8
+ if (memberExpression.property.type === "Literal" &&
9
+ typeof memberExpression.property.value === "string") {
10
+ return memberExpression.property.value;
11
+ }
12
+ return undefined;
13
+ };
14
+ const isFunctionExpression = (expression) => expression.type === "ArrowFunctionExpression" ||
15
+ expression.type === "FunctionExpression";
16
+ const hasInsecureCertificateOverride = (callbackNode, context, callbackParameterName) => {
17
+ const callbackSourceText = context.sourceCode.getText(callbackNode);
18
+ const escapedName = callbackParameterName.replaceAll("$", String.raw `\$`);
19
+ // eslint-disable-next-line security/detect-non-literal-regexp -- Callback identifier is escaped before interpolation for strict handler-call detection.
20
+ const callbackPattern = new RegExp(String.raw `\b${escapedName}\s*\(\s*0\b`, "u");
21
+ return (callbackPattern.test(callbackSourceText) ||
22
+ /\breturn\s+0\b/u.test(callbackSourceText));
23
+ };
24
+ /** Rule implementation. */
25
+ const rule = createRule({
26
+ create(context) {
27
+ return {
28
+ CallExpression(node) {
29
+ if (node.callee.type !== "MemberExpression") {
30
+ return;
31
+ }
32
+ if (getMemberPropertyName(node.callee) !==
33
+ "setCertificateVerifyProc") {
34
+ return;
35
+ }
36
+ const [firstArgument] = node.arguments;
37
+ if (firstArgument === undefined ||
38
+ firstArgument.type === "SpreadElement" ||
39
+ !isFunctionExpression(firstArgument)) {
40
+ return;
41
+ }
42
+ const callbackParameter = arrayAt(firstArgument.params, -1);
43
+ if (callbackParameter?.type !== "Identifier") {
44
+ return;
45
+ }
46
+ if (!hasInsecureCertificateOverride(firstArgument, context, callbackParameter.name)) {
47
+ return;
48
+ }
49
+ context.report({
50
+ messageId: "default",
51
+ node: firstArgument,
52
+ });
53
+ },
54
+ };
55
+ },
56
+ defaultOptions: [],
57
+ meta: {
58
+ deprecated: false,
59
+ docs: {
60
+ description: "disallow Electron certificate verify proc callbacks that accept invalid certificates.",
61
+ frozen: false,
62
+ recommended: false,
63
+ url: "https://nick2bad4u.github.io/eslint-plugin-SDL-2/docs/rules/no-electron-insecure-certificate-verify-proc",
64
+ },
65
+ messages: {
66
+ default: "Do not override certificate verification by returning/callbacking with 0 in setCertificateVerifyProc handlers.",
67
+ },
68
+ schema: [],
69
+ type: "problem",
70
+ },
71
+ name: "no-electron-insecure-certificate-verify-proc",
72
+ });
73
+ export default rule;
74
+ /* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after rule implementation declarations. */
75
+ //# sourceMappingURL=no-electron-insecure-certificate-verify-proc.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-insecure-certificate-verify-proc.js","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-certificate-verify-proc.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,qBAAqB,GAAG,CAC1B,gBAA2C,EACzB,EAAE;IACpB,IACI,CAAC,gBAAgB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EACjD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,IACI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC5C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CACzB,UAA2C,EAGb,EAAE,CAChC,UAAU,CAAC,IAAI,KAAK,yBAAyB;IAC7C,UAAU,CAAC,IAAI,KAAK,oBAAoB,CAAC;AAE7C,MAAM,8BAA8B,GAAG,CACnC,YAEiC,EACjC,OAAoD,EACpD,qBAA6B,EACtB,EAAE;IACT,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,CAAC;IAC1E,wJAAwJ;IACxJ,MAAM,eAAe,GAAG,IAAI,MAAM,CAC9B,MAAM,CAAC,GAAG,CAAA,KAAK,WAAW,aAAa,EACvC,GAAG,CACN,CAAC;IAEF,OAAO,CACH,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACxC,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAC7C,CAAC;AACN,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAwB;IAC1E,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,IACI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,0BAA0B,EAC5B,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAEvC,IACI,aAAa,KAAK,SAAS;oBAC3B,aAAa,CAAC,IAAI,KAAK,eAAe;oBACtC,CAAC,oBAAoB,CAAC,aAAa,CAAC,EACtC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAE5D,IAAI,iBAAiB,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC3C,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,8BAA8B,CAC3B,aAAa,EACb,OAAO,EACP,iBAAiB,CAAC,IAAI,CACzB,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,aAAa;iBACtB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,uFAAuF;YAC3F,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,0GAA0G;SAClH;QACD,QAAQ,EAAE;YACN,OAAO,EACH,gHAAgH;SACvH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,8CAA8C;CACvD,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
@@ -0,0 +1,5 @@
1
+ import { createRule } from "../_internal/create-rule.js";
2
+ /** Rule implementation. */
3
+ declare const rule: ReturnType<typeof createRule>;
4
+ export default rule;
5
+ //# sourceMappingURL=no-electron-insecure-permission-request-handler.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"no-electron-insecure-permission-request-handler.d.ts","sourceRoot":"","sources":["../../src/rules/no-electron-insecure-permission-request-handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqDzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}