eslint-plugin-sdl-2 1.0.4

package/dist/_internal/estree-utils.js

@@ -0,0 +1,112 @@
+import { arrayFirst } from "ts-extras";
+/**
+ * Get the static property name accessed by a member expression.
+ *
+ * Returns `undefined` for computed members whose property key cannot be
+ * resolved to a static string.
+ *
+ * @param memberExpression - Member expression to inspect.
+ *
+ * @returns Static property name when available.
+ */
+export const getMemberPropertyName = (memberExpression) => {
+    if (!memberExpression.computed &&
+        memberExpression.property.type === "Identifier") {
+        return memberExpression.property.name;
+    }
+    if (memberExpression.property.type === "Literal" &&
+        typeof memberExpression.property.value === "string") {
+        return memberExpression.property.value;
+    }
+    return undefined;
+};
+/**
+ * Get the static key name for an object literal property.
+ *
+ * @param property - Object property node to inspect.
+ *
+ * @returns Static property key when available.
+ */
+export const getPropertyName = (property) => {
+    if (property.computed) {
+        return undefined;
+    }
+    if (property.key.type === "Identifier") {
+        return property.key.name;
+    }
+    if (property.key.type === "Literal" &&
+        typeof property.key.value === "string") {
+        return property.key.value;
+    }
+    return undefined;
+};
+/**
+ * Find an initialized object literal property by its static key name.
+ *
+ * @param objectExpression - Object expression to search.
+ * @param propertyName - Property name to match.
+ *
+ * @returns Matching property node when present.
+ */
+export const getPropertyByName = (objectExpression, propertyName) => {
+    for (const propertyNode of objectExpression.properties) {
+        if (propertyNode.type !== "Property" || propertyNode.kind !== "init") {
+            continue;
+        }
+        if (getPropertyName(propertyNode) === propertyName) {
+            return propertyNode;
+        }
+    }
+    return undefined;
+};
+/**
+ * Resolve a string value from a static expression.
+ *
+ * Supports plain string literals and template literals without expressions.
+ *
+ * @param node - Expression node to inspect.
+ *
+ * @returns Static string value when available.
+ */
+export const getStaticStringValue = (node) => {
+    if (node.type === "Literal" && typeof node.value === "string") {
+        return node.value;
+    }
+    if (node.type === "TemplateLiteral" && node.expressions.length === 0) {
+        return arrayFirst(node.quasis)?.value.cooked ?? undefined;
+    }
+    return undefined;
+};
+/**
+ * Resolve a string value from a JSX attribute value.
+ *
+ * Supports plain string literals and JSX expression containers that wrap a
+ * static string literal or expression-free template literal.
+ *
+ * @param attributeValue - JSX attribute value node to inspect.
+ *
+ * @returns Static string value when available.
+ */
+export const getStaticJsxAttributeStringValue = (attributeValue) => {
+    if (attributeValue === null) {
+        return undefined;
+    }
+    if (attributeValue.type === "Literal" &&
+        typeof attributeValue.value === "string") {
+        return attributeValue.value;
+    }
+    if (attributeValue.type !== "JSXExpressionContainer") {
+        return undefined;
+    }
+    if (attributeValue.expression.type === "Literal" &&
+        typeof attributeValue.expression.value === "string") {
+        return attributeValue.expression.value;
+    }
+    if (attributeValue.expression.type === "TemplateLiteral" &&
+        attributeValue.expression.expressions.length === 0) {
+        return (arrayFirst(attributeValue.expression.quasis)?.value.cooked ??
+            undefined);
+    }
+    return undefined;
+};
+//# sourceMappingURL=estree-utils.js.map

package/dist/_internal/estree-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estree-utils.js","sourceRoot":"","sources":["../../src/_internal/estree-utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,gBAAqD,EACnC,EAAE;IACpB,IACI,CAAC,gBAAgB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EACjD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,IACI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC5C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC3B,QAAqC,EACnB,EAAE;IACpB,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,IACI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS;QAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,EACxC,CAAC;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC7B,gBAAqD,EACrD,YAAoB,EACS,EAAE;IAC/B,KAAK,MAAM,YAAY,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;QACrD,IAAI,YAAY,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnE,SAAS;QACb,CAAC;QAED,IAAI,eAAe,CAAC,YAAY,CAAC,KAAK,YAAY,EAAE,CAAC;YACjD,OAAO,YAAY,CAAC;QACxB,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAChC,IAAmC,EACjB,EAAE;IACpB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;IAC9D,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC5C,cAAwD,EACtC,EAAE;IACpB,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IACI,cAAc,CAAC,IAAI,KAAK,SAAS;QACjC,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EAC1C,CAAC;QACC,OAAO,cAAc,CAAC,KAAK,CAAC;IAChC,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IACI,cAAc,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;QAC5C,OAAO,cAAc,CAAC,UAAU,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;QACC,OAAO,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,IACI,cAAc,CAAC,UAAU,CAAC,IAAI,KAAK,iBAAiB;QACpD,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EACpD,CAAC;QACC,OAAO,CACH,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM;YAC1D,SAAS,CACZ,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC"}

package/dist/_internal/node-tls-config.d.ts

@@ -0,0 +1,44 @@
+import type { TSESTree } from "@typescript-eslint/utils";
+/**
+ * Check whether an expression targets a Node TLS-capable module object.
+ *
+ * @param expression - Expression to inspect.
+ *
+ * @returns Whether the expression resolves to `tls`, `https`, or `http2`.
+ */
+export declare const isNodeTlsObjectExpression: (expression: Readonly<TSESTree.Expression>) => boolean;
+/**
+ * Check whether a call expression targets a relevant Node TLS API sink.
+ *
+ * @param callee - Call-expression callee to inspect.
+ *
+ * @returns Whether the callee matches a TLS-relevant call site.
+ */
+export declare const isRelevantNodeTlsCall: (callee: Readonly<TSESTree.CallExpression["callee"]>) => boolean;
+/**
+ * Check whether a constructor call targets a relevant Node TLS constructor.
+ *
+ * @param callee - New-expression callee to inspect.
+ *
+ * @returns Whether the callee matches a TLS-relevant constructor site.
+ */
+export declare const isRelevantNodeTlsConstructor: (callee: Readonly<TSESTree.NewExpression["callee"]>) => boolean;
+/**
+ * Check whether an object literal is being used as options for a relevant Node
+ * TLS API.
+ *
+ * @param node - Object expression to inspect.
+ *
+ * @returns Whether the object expression belongs to a TLS-relevant call site.
+ */
+export declare const isRelevantNodeTlsOptionsObject: (node: Readonly<TSESTree.ObjectExpression>) => boolean;
+/**
+ * Check whether an assignment left-hand side targets a static TLS member.
+ *
+ * @param node - Assignment left-hand side expression to inspect.
+ * @param propertyNames - Allowed member names for matching.
+ *
+ * @returns Whether the node matches one of the targeted TLS static members.
+ */
+export declare const isNodeTlsStaticMember: (node: Readonly<TSESTree.AssignmentExpression["left"]>, propertyNames: ReadonlySet<string>) => node is TSESTree.MemberExpression;
+//# sourceMappingURL=node-tls-config.d.ts.map

package/dist/_internal/node-tls-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tls-config.d.ts","sourceRoot":"","sources":["../../src/_internal/node-tls-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAoBzD;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GAClC,YAAY,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,KAC1C,OAcF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAC9B,QAAQ,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,KACpD,OAgBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GACrC,QAAQ,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KACnD,OASF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GACvC,MAAM,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAC1C,OAYF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,GAC9B,MAAM,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,EACrD,eAAe,WAAW,CAAC,MAAM,CAAC,KACnC,IAAI,IAAI,QAAQ,CAAC,gBAYnB,CAAC"}

package/dist/_internal/node-tls-config.js

@@ -0,0 +1,101 @@
+import { isDefined, setHas } from "ts-extras";
+import { getMemberPropertyName } from "./estree-utils.js";
+const NODE_TLS_OBJECT_NAMES = new Set([
+    "http2",
+    "https",
+    "tls",
+]);
+const NODE_TLS_CALL_METHOD_NAMES = new Set([
+    "connect",
+    "createSecureContext",
+    "createSecureServer",
+    "createServer",
+    "get",
+    "request",
+]);
+/**
+ * Check whether an expression targets a Node TLS-capable module object.
+ *
+ * @param expression - Expression to inspect.
+ *
+ * @returns Whether the expression resolves to `tls`, `https`, or `http2`.
+ */
+export const isNodeTlsObjectExpression = (expression) => {
+    if (expression.type === "Identifier") {
+        return setHas(NODE_TLS_OBJECT_NAMES, expression.name);
+    }
+    if (expression.type !== "MemberExpression") {
+        return false;
+    }
+    const propertyName = getMemberPropertyName(expression);
+    return (isDefined(propertyName) && setHas(NODE_TLS_OBJECT_NAMES, propertyName));
+};
+/**
+ * Check whether a call expression targets a relevant Node TLS API sink.
+ *
+ * @param callee - Call-expression callee to inspect.
+ *
+ * @returns Whether the callee matches a TLS-relevant call site.
+ */
+export const isRelevantNodeTlsCall = (callee) => {
+    if (callee.type === "Identifier") {
+        return callee.name === "createSecureContext";
+    }
+    if (callee.type !== "MemberExpression") {
+        return false;
+    }
+    const methodName = getMemberPropertyName(callee);
+    return (isDefined(methodName) &&
+        setHas(NODE_TLS_CALL_METHOD_NAMES, methodName) &&
+        isNodeTlsObjectExpression(callee.object));
+};
+/**
+ * Check whether a constructor call targets a relevant Node TLS constructor.
+ *
+ * @param callee - New-expression callee to inspect.
+ *
+ * @returns Whether the callee matches a TLS-relevant constructor site.
+ */
+export const isRelevantNodeTlsConstructor = (callee) => {
+    if (callee.type !== "MemberExpression") {
+        return false;
+    }
+    return (getMemberPropertyName(callee) === "Agent" &&
+        isNodeTlsObjectExpression(callee.object));
+};
+/**
+ * Check whether an object literal is being used as options for a relevant Node
+ * TLS API.
+ *
+ * @param node - Object expression to inspect.
+ *
+ * @returns Whether the object expression belongs to a TLS-relevant call site.
+ */
+export const isRelevantNodeTlsOptionsObject = (node) => {
+    const parentNode = node.parent;
+    if (parentNode?.type === "CallExpression") {
+        return isRelevantNodeTlsCall(parentNode.callee);
+    }
+    if (parentNode?.type === "NewExpression") {
+        return isRelevantNodeTlsConstructor(parentNode.callee);
+    }
+    return false;
+};
+/**
+ * Check whether an assignment left-hand side targets a static TLS member.
+ *
+ * @param node - Assignment left-hand side expression to inspect.
+ * @param propertyNames - Allowed member names for matching.
+ *
+ * @returns Whether the node matches one of the targeted TLS static members.
+ */
+export const isNodeTlsStaticMember = (node, propertyNames) => {
+    if (node.type !== "MemberExpression") {
+        return false;
+    }
+    const propertyName = getMemberPropertyName(node);
+    return (isDefined(propertyName) &&
+        setHas(propertyNames, propertyName) &&
+        isNodeTlsObjectExpression(node.object));
+};
+//# sourceMappingURL=node-tls-config.js.map

package/dist/_internal/node-tls-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tls-config.js","sourceRoot":"","sources":["../../src/_internal/node-tls-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAClC,OAAO;IACP,OAAO;IACP,KAAK;CACR,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACvC,SAAS;IACT,qBAAqB;IACrB,oBAAoB;IACpB,cAAc;IACd,KAAK;IACL,SAAS;CACZ,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACrC,UAAyC,EAClC,EAAE;IACT,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,qBAAqB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAEvD,OAAO,CACH,SAAS,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,YAAY,CAAC,CACzE,CAAC;AACN,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,MAAmD,EAC5C,EAAE;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,KAAK,qBAAqB,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEjD,OAAO,CACH,SAAS,CAAC,UAAU,CAAC;QACrB,MAAM,CAAC,0BAA0B,EAAE,UAAU,CAAC;QAC9C,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAC3C,CAAC;AACN,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CACxC,MAAkD,EAC3C,EAAE;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CACH,qBAAqB,CAAC,MAAM,CAAC,KAAK,OAAO;QACzC,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAC3C,CAAC;AACN,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC1C,IAAyC,EAClC,EAAE;IACT,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACxC,OAAO,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;QACvC,OAAO,4BAA4B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,IAAqD,EACrD,aAAkC,EACD,EAAE;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjD,OAAO,CACH,SAAS,CAAC,YAAY,CAAC;QACvB,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC;QACnC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CACzC,CAAC;AACN,CAAC,CAAC"}

package/dist/_internal/rules-registry.d.ts

@@ -0,0 +1,10 @@
+import type { TSESLint } from "@typescript-eslint/utils";
+import type { UnknownArray } from "type-fest";
+/** Canonical SDL rule module type used in the exported registry map. */
+export type SdlRuleModule = TSESLint.RuleModule<string, Readonly<UnknownArray>>;
+/** Naming convention for SDL security rule identifiers. */
+export type SdlRuleNamePattern = `no-${string}`;
+/** SDL rule registry keyed by rule name for plugin export wiring. */
+export declare const sdlRules: Readonly<Record<SdlRuleNamePattern, SdlRuleModule>>;
+export default sdlRules;
+//# sourceMappingURL=rules-registry.d.ts.map

package/dist/_internal/rules-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-registry.d.ts","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AA0E9C,wEAAwE;AACxE,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;AAEhF,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,MAAM,MAAM,EAAE,CAAC;AAEhD,qEAAqE;AACrE,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,CA2FxE,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/_internal/rules-registry.js

@@ -0,0 +1,148 @@
+import noAngularBypassSanitizerRule from "../rules/no-angular-bypass-sanitizer.js";
+import noAngularBypassSecurityTrustHtmlRule from "../rules/no-angular-bypass-security-trust-html.js";
+import noAngularInnerhtmlBindingRule from "../rules/no-angular-innerhtml-binding.js";
+import noAngularSanitizationTrustedUrlsRule from "../rules/no-angular-sanitization-trusted-urls.js";
+import noAngularjsBypassSceRule from "../rules/no-angularjs-bypass-sce.js";
+import noAngularjsEnableSvgRule from "../rules/no-angularjs-enable-svg.js";
+import noAngularjsNgBindHtmlWithoutSanitizeRule from "../rules/no-angularjs-ng-bind-html-without-sanitize.js";
+import noAngularjsSanitizationWhitelistRule from "../rules/no-angularjs-sanitization-whitelist.js";
+import noAngularjsSceResourceUrlWildcardRule from "../rules/no-angularjs-sce-resource-url-wildcard.js";
+import noChildProcessExecRule from "../rules/no-child-process-exec.js";
+import noChildProcessShellTrueRule from "../rules/no-child-process-shell-true.js";
+import noCookiesRule from "../rules/no-cookies.js";
+import noDocumentDomainRule from "../rules/no-document-domain.js";
+import noDocumentExeccommandInsertHtmlRule from "../rules/no-document-execcommand-insert-html.js";
+import noDocumentParseHtmlUnsafeRule from "../rules/no-document-parse-html-unsafe.js";
+import noDocumentWriteRule from "../rules/no-document-write.js";
+import noDomparserHtmlWithoutSanitizationRule from "../rules/no-domparser-html-without-sanitization.js";
+import noDomparserSvgWithoutSanitizationRule from "../rules/no-domparser-svg-without-sanitization.js";
+import noDynamicImportUnsafeUrlRule from "../rules/no-dynamic-import-unsafe-url.js";
+import noElectronAllowRunningInsecureContentRule from "../rules/no-electron-allow-running-insecure-content.js";
+import noElectronDangerousBlinkFeaturesRule from "../rules/no-electron-dangerous-blink-features.js";
+import noElectronDisableContextIsolationRule from "../rules/no-electron-disable-context-isolation.js";
+import noElectronDisableSandboxRule from "../rules/no-electron-disable-sandbox.js";
+import noElectronDisableWebSecurityRule from "../rules/no-electron-disable-web-security.js";
+import noElectronEnableRemoteModuleRule from "../rules/no-electron-enable-remote-module.js";
+import noElectronEnableWebviewTagRule from "../rules/no-electron-enable-webview-tag.js";
+import noElectronExperimentalFeaturesRule from "../rules/no-electron-experimental-features.js";
+import noElectronExposeRawIpcRendererRule from "../rules/no-electron-expose-raw-ipc-renderer.js";
+import noElectronInsecureCertificateErrorHandlerRule from "../rules/no-electron-insecure-certificate-error-handler.js";
+import noElectronInsecureCertificateVerifyProcRule from "../rules/no-electron-insecure-certificate-verify-proc.js";
+import noElectronInsecurePermissionRequestHandlerRule from "../rules/no-electron-insecure-permission-request-handler.js";
+import noElectronNodeIntegrationRule from "../rules/no-electron-node-integration.js";
+import noElectronPermissionCheckHandlerAllowAllRule from "../rules/no-electron-permission-check-handler-allow-all.js";
+import noElectronUncheckedIpcSenderRule from "../rules/no-electron-unchecked-ipc-sender.js";
+import noElectronUnrestrictedNavigationRule from "../rules/no-electron-unrestricted-navigation.js";
+import noElectronUntrustedOpenExternalRule from "../rules/no-electron-untrusted-open-external.js";
+import noElectronWebviewAllowpopupsRule from "../rules/no-electron-webview-allowpopups.js";
+import noElectronWebviewInsecureWebpreferencesRule from "../rules/no-electron-webview-insecure-webpreferences.js";
+import noElectronWebviewNodeIntegrationRule from "../rules/no-electron-webview-node-integration.js";
+import noHtmlMethodRule from "../rules/no-html-method.js";
+import noHttpRequestToInsecureProtocolRule from "../rules/no-http-request-to-insecure-protocol.js";
+import noIframeSrcdocRule from "../rules/no-iframe-srcdoc.js";
+import noInnerHtmlRule from "../rules/no-inner-html.js";
+import noInsecureRandomRule from "../rules/no-insecure-random.js";
+import noInsecureTlsAgentOptionsRule from "../rules/no-insecure-tls-agent-options.js";
+import noInsecureUrlRule from "../rules/no-insecure-url.js";
+import noLocationJavascriptUrlRule from "../rules/no-location-javascript-url.js";
+import noMessageEventWithoutOriginCheckRule from "../rules/no-message-event-without-origin-check.js";
+import noMsappExecUnsafeRule from "../rules/no-msapp-exec-unsafe.js";
+import noNodeTlsCheckServerIdentityBypassRule from "../rules/no-node-tls-check-server-identity-bypass.js";
+import noNodeTlsLegacyProtocolRule from "../rules/no-node-tls-legacy-protocol.js";
+import noNodeTlsRejectUnauthorizedZeroRule from "../rules/no-node-tls-reject-unauthorized-zero.js";
+import noNodeTlsSecurityLevelZeroRule from "../rules/no-node-tls-security-level-zero.js";
+import noNodeVmRunInContextRule from "../rules/no-node-vm-run-in-context.js";
+import noNodeVmSourceTextModuleRule from "../rules/no-node-vm-source-text-module.js";
+import noNodeWorkerThreadsEvalRule from "../rules/no-node-worker-threads-eval.js";
+import noNonnullAssertionOnSecurityInputRule from "../rules/no-nonnull-assertion-on-security-input.js";
+import noPostmessageStarOriginRule from "../rules/no-postmessage-star-origin.js";
+import noPostmessageWithoutOriginAllowlistRule from "../rules/no-postmessage-without-origin-allowlist.js";
+import noRangeCreateContextualFragmentRule from "../rules/no-range-create-contextual-fragment.js";
+import noScriptSrcDataUrlRule from "../rules/no-script-src-data-url.js";
+import noScriptTextRule from "../rules/no-script-text.js";
+import noServiceWorkerUnsafeScriptUrlRule from "../rules/no-service-worker-unsafe-script-url.js";
+import noSetHtmlUnsafeRule from "../rules/no-set-html-unsafe.js";
+import noTrustedTypesPolicyPassThroughRule from "../rules/no-trusted-types-policy-pass-through.js";
+import noUnsafeAllocRule from "../rules/no-unsafe-alloc.js";
+import noUnsafeCastToTrustedTypesRule from "../rules/no-unsafe-cast-to-trusted-types.js";
+import noWindowOpenWithoutNoopenerRule from "../rules/no-window-open-without-noopener.js";
+import noWinjsHtmlUnsafeRule from "../rules/no-winjs-html-unsafe.js";
+import noWorkerBlobUrlRule from "../rules/no-worker-blob-url.js";
+import noWorkerDataUrlRule from "../rules/no-worker-data-url.js";
+/** SDL rule registry keyed by rule name for plugin export wiring. */
+export const sdlRules = {
+    "no-angular-bypass-sanitizer": noAngularBypassSanitizerRule,
+    "no-angular-bypass-security-trust-html": noAngularBypassSecurityTrustHtmlRule,
+    "no-angular-innerhtml-binding": noAngularInnerhtmlBindingRule,
+    "no-angular-sanitization-trusted-urls": noAngularSanitizationTrustedUrlsRule,
+    "no-angularjs-bypass-sce": noAngularjsBypassSceRule,
+    "no-angularjs-enable-svg": noAngularjsEnableSvgRule,
+    "no-angularjs-ng-bind-html-without-sanitize": noAngularjsNgBindHtmlWithoutSanitizeRule,
+    "no-angularjs-sanitization-whitelist": noAngularjsSanitizationWhitelistRule,
+    "no-angularjs-sce-resource-url-wildcard": noAngularjsSceResourceUrlWildcardRule,
+    "no-child-process-exec": noChildProcessExecRule,
+    "no-child-process-shell-true": noChildProcessShellTrueRule,
+    "no-cookies": noCookiesRule,
+    "no-document-domain": noDocumentDomainRule,
+    "no-document-execcommand-insert-html": noDocumentExeccommandInsertHtmlRule,
+    "no-document-parse-html-unsafe": noDocumentParseHtmlUnsafeRule,
+    "no-document-write": noDocumentWriteRule,
+    "no-domparser-html-without-sanitization": noDomparserHtmlWithoutSanitizationRule,
+    "no-domparser-svg-without-sanitization": noDomparserSvgWithoutSanitizationRule,
+    "no-dynamic-import-unsafe-url": noDynamicImportUnsafeUrlRule,
+    "no-electron-allow-running-insecure-content": noElectronAllowRunningInsecureContentRule,
+    "no-electron-dangerous-blink-features": noElectronDangerousBlinkFeaturesRule,
+    "no-electron-disable-context-isolation": noElectronDisableContextIsolationRule,
+    "no-electron-disable-sandbox": noElectronDisableSandboxRule,
+    "no-electron-disable-web-security": noElectronDisableWebSecurityRule,
+    "no-electron-enable-remote-module": noElectronEnableRemoteModuleRule,
+    "no-electron-enable-webview-tag": noElectronEnableWebviewTagRule,
+    "no-electron-experimental-features": noElectronExperimentalFeaturesRule,
+    "no-electron-expose-raw-ipc-renderer": noElectronExposeRawIpcRendererRule,
+    "no-electron-insecure-certificate-error-handler": noElectronInsecureCertificateErrorHandlerRule,
+    "no-electron-insecure-certificate-verify-proc": noElectronInsecureCertificateVerifyProcRule,
+    "no-electron-insecure-permission-request-handler": noElectronInsecurePermissionRequestHandlerRule,
+    "no-electron-node-integration": noElectronNodeIntegrationRule,
+    "no-electron-permission-check-handler-allow-all": noElectronPermissionCheckHandlerAllowAllRule,
+    "no-electron-unchecked-ipc-sender": noElectronUncheckedIpcSenderRule,
+    "no-electron-unrestricted-navigation": noElectronUnrestrictedNavigationRule,
+    "no-electron-untrusted-open-external": noElectronUntrustedOpenExternalRule,
+    "no-electron-webview-allowpopups": noElectronWebviewAllowpopupsRule,
+    "no-electron-webview-insecure-webpreferences": noElectronWebviewInsecureWebpreferencesRule,
+    "no-electron-webview-node-integration": noElectronWebviewNodeIntegrationRule,
+    "no-html-method": noHtmlMethodRule,
+    "no-http-request-to-insecure-protocol": noHttpRequestToInsecureProtocolRule,
+    "no-iframe-srcdoc": noIframeSrcdocRule,
+    "no-inner-html": noInnerHtmlRule,
+    "no-insecure-random": noInsecureRandomRule,
+    "no-insecure-tls-agent-options": noInsecureTlsAgentOptionsRule,
+    "no-insecure-url": noInsecureUrlRule,
+    "no-location-javascript-url": noLocationJavascriptUrlRule,
+    "no-message-event-without-origin-check": noMessageEventWithoutOriginCheckRule,
+    "no-msapp-exec-unsafe": noMsappExecUnsafeRule,
+    "no-node-tls-check-server-identity-bypass": noNodeTlsCheckServerIdentityBypassRule,
+    "no-node-tls-legacy-protocol": noNodeTlsLegacyProtocolRule,
+    "no-node-tls-reject-unauthorized-zero": noNodeTlsRejectUnauthorizedZeroRule,
+    "no-node-tls-security-level-zero": noNodeTlsSecurityLevelZeroRule,
+    "no-node-vm-run-in-context": noNodeVmRunInContextRule,
+    "no-node-vm-source-text-module": noNodeVmSourceTextModuleRule,
+    "no-node-worker-threads-eval": noNodeWorkerThreadsEvalRule,
+    "no-nonnull-assertion-on-security-input": noNonnullAssertionOnSecurityInputRule,
+    "no-postmessage-star-origin": noPostmessageStarOriginRule,
+    "no-postmessage-without-origin-allowlist": noPostmessageWithoutOriginAllowlistRule,
+    "no-range-create-contextual-fragment": noRangeCreateContextualFragmentRule,
+    "no-script-src-data-url": noScriptSrcDataUrlRule,
+    "no-script-text": noScriptTextRule,
+    "no-service-worker-unsafe-script-url": noServiceWorkerUnsafeScriptUrlRule,
+    "no-set-html-unsafe": noSetHtmlUnsafeRule,
+    "no-trusted-types-policy-pass-through": noTrustedTypesPolicyPassThroughRule,
+    "no-unsafe-alloc": noUnsafeAllocRule,
+    "no-unsafe-cast-to-trusted-types": noUnsafeCastToTrustedTypesRule,
+    "no-window-open-without-noopener": noWindowOpenWithoutNoopenerRule,
+    "no-winjs-html-unsafe": noWinjsHtmlUnsafeRule,
+    "no-worker-blob-url": noWorkerBlobUrlRule,
+    "no-worker-data-url": noWorkerDataUrlRule,
+};
+export default sdlRules;
+/* eslint-enable canonical/no-re-export -- End of intentional registry aggregation. */
+//# sourceMappingURL=rules-registry.js.map

package/dist/_internal/rules-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-registry.js","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAIA,OAAO,4BAA4B,MAAM,yCAAyC,CAAC;AACnF,OAAO,oCAAoC,MAAM,mDAAmD,CAAC;AACrG,OAAO,6BAA6B,MAAM,0CAA0C,CAAC;AACrF,OAAO,oCAAoC,MAAM,kDAAkD,CAAC;AACpG,OAAO,wBAAwB,MAAM,qCAAqC,CAAC;AAC3E,OAAO,wBAAwB,MAAM,qCAAqC,CAAC;AAC3E,OAAO,wCAAwC,MAAM,wDAAwD,CAAC;AAC9G,OAAO,oCAAoC,MAAM,iDAAiD,CAAC;AACnG,OAAO,qCAAqC,MAAM,oDAAoD,CAAC;AACvG,OAAO,sBAAsB,MAAM,mCAAmC,CAAC;AACvE,OAAO,2BAA2B,MAAM,yCAAyC,CAAC;AAClF,OAAO,aAAa,MAAM,wBAAwB,CAAC;AACnD,OAAO,oBAAoB,MAAM,gCAAgC,CAAC;AAClE,OAAO,mCAAmC,MAAM,iDAAiD,CAAC;AAClG,OAAO,6BAA6B,MAAM,2CAA2C,CAAC;AACtF,OAAO,mBAAmB,MAAM,+BAA+B,CAAC;AAChE,OAAO,sCAAsC,MAAM,oDAAoD,CAAC;AACxG,OAAO,qCAAqC,MAAM,mDAAmD,CAAC;AACtG,OAAO,4BAA4B,MAAM,0CAA0C,CAAC;AACpF,OAAO,yCAAyC,MAAM,wDAAwD,CAAC;AAC/G,OAAO,oCAAoC,MAAM,kDAAkD,CAAC;AACpG,OAAO,qCAAqC,MAAM,mDAAmD,CAAC;AACtG,OAAO,4BAA4B,MAAM,yCAAyC,CAAC;AACnF,OAAO,gCAAgC,MAAM,8CAA8C,CAAC;AAC5F,OAAO,gCAAgC,MAAM,8CAA8C,CAAC;AAC5F,OAAO,8BAA8B,MAAM,4CAA4C,CAAC;AACxF,OAAO,kCAAkC,MAAM,+CAA+C,CAAC;AAC/F,OAAO,kCAAkC,MAAM,iDAAiD,CAAC;AACjG,OAAO,6CAA6C,MAAM,4DAA4D,CAAC;AACvH,OAAO,2CAA2C,MAAM,0DAA0D,CAAC;AACnH,OAAO,8CAA8C,MAAM,6DAA6D,CAAC;AACzH,OAAO,6BAA6B,MAAM,0CAA0C,CAAC;AACrF,OAAO,4CAA4C,MAAM,4DAA4D,CAAC;AACtH,OAAO,gCAAgC,MAAM,8CAA8C,CAAC;AAC5F,OAAO,oCAAoC,MAAM,iDAAiD,CAAC;AACnG,OAAO,mCAAmC,MAAM,iDAAiD,CAAC;AAClG,OAAO,gCAAgC,MAAM,6CAA6C,CAAC;AAC3F,OAAO,2CAA2C,MAAM,yDAAyD,CAAC;AAClH,OAAO,oCAAoC,MAAM,kDAAkD,CAAC;AACpG,OAAO,gBAAgB,MAAM,4BAA4B,CAAC;AAC1D,OAAO,mCAAmC,MAAM,kDAAkD,CAAC;AACnG,OAAO,kBAAkB,MAAM,8BAA8B,CAAC;AAC9D,OAAO,eAAe,MAAM,2BAA2B,CAAC;AACxD,OAAO,oBAAoB,MAAM,gCAAgC,CAAC;AAClE,OAAO,6BAA6B,MAAM,2CAA2C,CAAC;AACtF,OAAO,iBAAiB,MAAM,6BAA6B,CAAC;AAC5D,OAAO,2BAA2B,MAAM,wCAAwC,CAAC;AACjF,OAAO,oCAAoC,MAAM,mDAAmD,CAAC;AACrG,OAAO,qBAAqB,MAAM,kCAAkC,CAAC;AACrE,OAAO,sCAAsC,MAAM,sDAAsD,CAAC;AAC1G,OAAO,2BAA2B,MAAM,yCAAyC,CAAC;AAClF,OAAO,mCAAmC,MAAM,kDAAkD,CAAC;AACnG,OAAO,8BAA8B,MAAM,6CAA6C,CAAC;AACzF,OAAO,wBAAwB,MAAM,uCAAuC,CAAC;AAC7E,OAAO,4BAA4B,MAAM,2CAA2C,CAAC;AACrF,OAAO,2BAA2B,MAAM,yCAAyC,CAAC;AAClF,OAAO,qCAAqC,MAAM,oDAAoD,CAAC;AACvG,OAAO,2BAA2B,MAAM,wCAAwC,CAAC;AACjF,OAAO,uCAAuC,MAAM,qDAAqD,CAAC;AAC1G,OAAO,mCAAmC,MAAM,iDAAiD,CAAC;AAClG,OAAO,sBAAsB,MAAM,oCAAoC,CAAC;AACxE,OAAO,gBAAgB,MAAM,4BAA4B,CAAC;AAC1D,OAAO,kCAAkC,MAAM,iDAAiD,CAAC;AACjG,OAAO,mBAAmB,MAAM,gCAAgC,CAAC;AACjE,OAAO,mCAAmC,MAAM,kDAAkD,CAAC;AACnG,OAAO,iBAAiB,MAAM,6BAA6B,CAAC;AAC5D,OAAO,8BAA8B,MAAM,6CAA6C,CAAC;AACzF,OAAO,+BAA+B,MAAM,6CAA6C,CAAC;AAC1F,OAAO,qBAAqB,MAAM,kCAAkC,CAAC;AACrE,OAAO,mBAAmB,MAAM,gCAAgC,CAAC;AACjE,OAAO,mBAAmB,MAAM,gCAAgC,CAAC;AAQjE,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAwD;IACzE,6BAA6B,EAAE,4BAA4B;IAC3D,uCAAuC,EACnC,oCAAoC;IACxC,8BAA8B,EAAE,6BAA6B;IAC7D,sCAAsC,EAClC,oCAAoC;IACxC,yBAAyB,EAAE,wBAAwB;IACnD,yBAAyB,EAAE,wBAAwB;IACnD,4CAA4C,EACxC,wCAAwC;IAC5C,qCAAqC,EAAE,oCAAoC;IAC3E,wCAAwC,EACpC,qCAAqC;IACzC,uBAAuB,EAAE,sBAAsB;IAC/C,6BAA6B,EAAE,2BAA2B;IAC1D,YAAY,EAAE,aAAa;IAC3B,oBAAoB,EAAE,oBAAoB;IAC1C,qCAAqC,EAAE,mCAAmC;IAC1E,+BAA+B,EAAE,6BAA6B;IAC9D,mBAAmB,EAAE,mBAAmB;IACxC,wCAAwC,EACpC,sCAAsC;IAC1C,uCAAuC,EACnC,qCAAqC;IACzC,8BAA8B,EAAE,4BAA4B;IAC5D,4CAA4C,EACxC,yCAAyC;IAC7C,sCAAsC,EAClC,oCAAoC;IACxC,uCAAuC,EACnC,qCAAqC;IACzC,6BAA6B,EAAE,4BAA4B;IAC3D,kCAAkC,EAAE,gCAAgC;IACpE,kCAAkC,EAAE,gCAAgC;IACpE,gCAAgC,EAAE,8BAA8B;IAChE,mCAAmC,EAAE,kCAAkC;IACvE,qCAAqC,EAAE,kCAAkC;IACzE,gDAAgD,EAC5C,6CAA6C;IACjD,8CAA8C,EAC1C,2CAA2C;IAC/C,iDAAiD,EAC7C,8CAA8C;IAClD,8BAA8B,EAAE,6BAA6B;IAC7D,gDAAgD,EAC5C,4CAA4C;IAChD,kCAAkC,EAAE,gCAAgC;IACpE,qCAAqC,EAAE,oCAAoC;IAC3E,qCAAqC,EAAE,mCAAmC;IAC1E,iCAAiC,EAAE,gCAAgC;IACnE,6CAA6C,EACzC,2CAA2C;IAC/C,sCAAsC,EAClC,oCAAoC;IACxC,gBAAgB,EAAE,gBAAgB;IAClC,sCAAsC,EAAE,mCAAmC;IAC3E,kBAAkB,EAAE,kBAAkB;IACtC,eAAe,EAAE,eAAe;IAChC,oBAAoB,EAAE,oBAAoB;IAC1C,+BAA+B,EAAE,6BAA6B;IAC9D,iBAAiB,EAAE,iBAAiB;IACpC,4BAA4B,EAAE,2BAA2B;IACzD,uCAAuC,EACnC,oCAAoC;IACxC,sBAAsB,EAAE,qBAAqB;IAC7C,0CAA0C,EACtC,sCAAsC;IAC1C,6BAA6B,EAAE,2BAA2B;IAC1D,sCAAsC,EAAE,mCAAmC;IAC3E,iCAAiC,EAAE,8BAA8B;IACjE,2BAA2B,EAAE,wBAAwB;IACrD,+BAA+B,EAAE,4BAA4B;IAC7D,6BAA6B,EAAE,2BAA2B;IAC1D,wCAAwC,EACpC,qCAAqC;IACzC,4BAA4B,EAAE,2BAA2B;IACzD,yCAAyC,EACrC,uCAAuC;IAC3C,qCAAqC,EAAE,mCAAmC;IAC1E,wBAAwB,EAAE,sBAAsB;IAChD,gBAAgB,EAAE,gBAAgB;IAClC,qCAAqC,EAAE,kCAAkC;IACzE,oBAAoB,EAAE,mBAAmB;IACzC,sCAAsC,EAAE,mCAAmC;IAC3E,iBAAiB,EAAE,iBAAiB;IACpC,iCAAiC,EAAE,8BAA8B;IACjE,iCAAiC,EAAE,+BAA+B;IAClE,sBAAsB,EAAE,qBAAqB;IAC7C,oBAAoB,EAAE,mBAAmB;IACzC,oBAAoB,EAAE,mBAAmB;CAC5C,CAAC;AAEF,eAAe,QAAQ,CAAC;AACxB,sFAAsF"}

package/dist/_internal/script-element.d.ts

@@ -0,0 +1,7 @@
+import type { TSESTree } from "@typescript-eslint/utils";
+import { type getFullTypeChecker } from "./ast-utils.js";
+/** ESLint rule context shape accepted by AST/type helper utilities. */
+export type AstUtilsRuleContext = Parameters<typeof getFullTypeChecker>[0];
+/** Returns whether an AST node likely refers to an `HTMLScriptElement`. */
+export declare const isLikelyScriptElement: (node: TSESTree.Node, context: AstUtilsRuleContext, fullTypeChecker: ReturnType<typeof getFullTypeChecker>) => boolean;
+//# sourceMappingURL=script-element.d.ts.map

package/dist/_internal/script-element.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-element.d.ts","sourceRoot":"","sources":["../../src/_internal/script-element.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,KAAK,kBAAkB,EAAuB,MAAM,gBAAgB,CAAC;AAG9E,uEAAuE;AACvE,MAAM,MAAM,mBAAmB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;AAgC3E,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,GAC9B,MAAM,QAAQ,CAAC,IAAI,EACnB,SAAS,mBAAmB,EAC5B,iBAAiB,UAAU,CAAC,OAAO,kBAAkB,CAAC,KACvD,OA4BF,CAAC"}

package/dist/_internal/script-element.js

@@ -0,0 +1,46 @@
+import { getNodeTypeAsString } from "./ast-utils.js";
+import { getMemberPropertyName, getStaticStringValue } from "./estree-utils.js";
+const isLikelyScriptIdentifierName = (identifierName) => identifierName === "currentScript" ||
+    identifierName === "script" ||
+    identifierName === "scriptElement" ||
+    identifierName.endsWith("Script") ||
+    identifierName.endsWith("ScriptElement") ||
+    identifierName.endsWith("_script") ||
+    identifierName.endsWith("_script_element");
+const isCreateElementScriptCall = (node) => {
+    if (node.type !== "CallExpression" ||
+        node.callee.type !== "MemberExpression") {
+        return false;
+    }
+    if (getMemberPropertyName(node.callee) !== "createElement") {
+        return false;
+    }
+    const [firstArgument] = node.arguments;
+    return (firstArgument !== undefined &&
+        firstArgument.type !== "SpreadElement" &&
+        getStaticStringValue(firstArgument) === "script");
+};
+/** Returns whether an AST node likely refers to an `HTMLScriptElement`. */
+export const isLikelyScriptElement = (node, context, fullTypeChecker) => {
+    if (fullTypeChecker !== undefined) {
+        const nodeType = getNodeTypeAsString(fullTypeChecker, node, context);
+        if (nodeType.includes("HTMLScriptElement")) {
+            return true;
+        }
+    }
+    if (isCreateElementScriptCall(node)) {
+        return true;
+    }
+    if (node.type === "Identifier") {
+        return isLikelyScriptIdentifierName(node.name);
+    }
+    if (node.type !== "MemberExpression") {
+        return false;
+    }
+    const propertyName = getMemberPropertyName(node);
+    return (typeof propertyName === "string" &&
+        (propertyName === "currentScript" ||
+            isLikelyScriptIdentifierName(propertyName)));
+};
+/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Restore linting after script element helper declarations. */
+//# sourceMappingURL=script-element.js.map

package/dist/_internal/script-element.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-element.js","sourceRoot":"","sources":["../../src/_internal/script-element.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2B,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAKhF,MAAM,4BAA4B,GAAG,CAAC,cAAsB,EAAW,EAAE,CACrE,cAAc,KAAK,eAAe;IAClC,cAAc,KAAK,QAAQ;IAC3B,cAAc,KAAK,eAAe;IAClC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACjC,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;IACxC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;IAClC,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,yBAAyB,GAAG,CAAC,IAAmB,EAAW,EAAE;IAC/D,IACI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EACzC,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAEvC,OAAO,CACH,aAAa,KAAK,SAAS;QAC3B,aAAa,CAAC,IAAI,KAAK,eAAe;QACtC,oBAAoB,CAAC,aAAa,CAAC,KAAK,QAAQ,CACnD,CAAC;AACN,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,IAAmB,EACnB,OAA4B,EAC5B,eAAsD,EAC/C,EAAE;IACT,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAErE,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjD,OAAO,CACH,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,YAAY,KAAK,eAAe;YAC7B,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAClD,CAAC;AACN,CAAC,CAAC;AAEF,mIAAmI"}

package/dist/_internal/worker-code-loading.d.ts

@@ -0,0 +1,69 @@
+import type { TSESTree } from "@typescript-eslint/utils";
+/**
+ * Check whether a value is a static `blob:` URL.
+ *
+ * @param value - URL string to inspect.
+ *
+ * @returns Whether the string starts with `blob:`.
+ */
+export declare const isBlobUrl: (value: string) => boolean;
+/**
+ * Check whether a value is a static `data:` URL.
+ *
+ * @param value - URL string to inspect.
+ *
+ * @returns Whether the string starts with `data:`.
+ */
+export declare const isDataUrl: (value: string) => boolean;
+/**
+ * Check whether an expression is one of the common global objects used for
+ * worker-related APIs.
+ *
+ * @param value - Expression to inspect.
+ *
+ * @returns Whether the expression is `window`, `self`, or `globalThis`.
+ */
+export declare const isWorkerGlobalObject: (value: Readonly<TSESTree.Expression>) => boolean;
+/**
+ * Check whether a constructor callee targets `Worker` or `SharedWorker`.
+ *
+ * @param callee - Constructor callee to inspect.
+ *
+ * @returns Whether the callee is a worker constructor.
+ */
+export declare const isWorkerConstructor: (callee: Readonly<TSESTree.NewExpression["callee"]>) => boolean;
+/**
+ * Check whether a call targets `importScripts(...)`.
+ *
+ * @param callee - Call callee to inspect.
+ *
+ * @returns Whether the callee is an importScripts sink.
+ */
+export declare const isImportScriptsCall: (callee: Readonly<TSESTree.CallExpression["callee"]>) => boolean;
+/**
+ * Check whether an expression resolves the service worker container from
+ * `navigator.serviceWorker`.
+ *
+ * @param value - Expression to inspect.
+ *
+ * @returns Whether the expression is a service worker container access.
+ */
+export declare const isServiceWorkerContainerAccess: (value: Readonly<TSESTree.Expression>) => value is TSESTree.MemberExpression;
+/**
+ * Check whether a call targets `navigator.serviceWorker.register(...)`.
+ *
+ * @param callee - Call callee to inspect.
+ *
+ * @returns Whether the callee is a service worker registration sink.
+ */
+export declare const isServiceWorkerRegisterCall: (callee: Readonly<TSESTree.CallExpression["callee"]>) => boolean;
+/**
+ * Check whether an expression is a direct `URL.createObjectURL(...)` call.
+ *
+ * @param node - Expression to inspect.
+ *
+ * @returns Whether the expression creates an object URL from the global URL
+ *   API.
+ */
+export declare const isUrlCreateObjectUrlCall: (node: Readonly<TSESTree.Expression>) => node is TSESTree.CallExpression;
+//# sourceMappingURL=worker-code-loading.d.ts.map

package/dist/_internal/worker-code-loading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-code-loading.d.ts","sourceRoot":"","sources":["../../src/_internal/worker-code-loading.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AA+BzD;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,KAAG,OAAoC,CAAC;AAE/E;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,KAAG,OAAoC,CAAC;AAU/E;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAC7B,OAAO,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,KACrC,OAAwE,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAC5B,QAAQ,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KACnD,OAaF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAC5B,QAAQ,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,KACpD,OAaF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GACvC,OAAO,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,KACrC,KAAK,IAAI,QAAQ,CAAC,gBASpB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,GACpC,QAAQ,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,KACpD,OAG8C,CAAC;AAelD;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GACjC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,KACpC,IAAI,IAAI,QAAQ,CAAC,cAkBnB,CAAC"}