eslint-plugin-sdl-2 1.2.2 → 1.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/_internal/ast-utils.d.ts.map +1 -1
- package/dist/_internal/ast-utils.js +9 -8
- package/dist/_internal/ast-utils.js.map +1 -1
- package/dist/_internal/create-rule.d.ts +3 -1
- package/dist/_internal/create-rule.d.ts.map +1 -1
- package/dist/_internal/create-rule.js +5 -1
- package/dist/_internal/create-rule.js.map +1 -1
- package/dist/_internal/domparser.d.ts.map +1 -1
- package/dist/_internal/domparser.js +8 -7
- package/dist/_internal/domparser.js.map +1 -1
- package/dist/_internal/electron-web-preferences.d.ts.map +1 -1
- package/dist/_internal/electron-web-preferences.js +12 -10
- package/dist/_internal/electron-web-preferences.js.map +1 -1
- package/dist/_internal/estree-utils.d.ts.map +1 -1
- package/dist/_internal/estree-utils.js +17 -15
- package/dist/_internal/estree-utils.js.map +1 -1
- package/dist/_internal/node-tls-config.d.ts.map +1 -1
- package/dist/_internal/node-tls-config.js +9 -8
- package/dist/_internal/node-tls-config.js.map +1 -1
- package/dist/_internal/rules-registry.d.ts.map +1 -1
- package/dist/_internal/rules-registry.js +142 -143
- package/dist/_internal/rules-registry.js.map +1 -1
- package/dist/_internal/script-element.d.ts.map +1 -1
- package/dist/_internal/script-element.js +6 -5
- package/dist/_internal/script-element.js.map +1 -1
- package/dist/_internal/worker-code-loading.d.ts.map +1 -1
- package/dist/_internal/worker-code-loading.js +18 -17
- package/dist/_internal/worker-code-loading.js.map +1 -1
- package/dist/plugin.cjs +579 -497
- package/dist/plugin.cjs.map +4 -4
- package/dist/plugin.d.ts.map +1 -1
- package/dist/plugin.js +38 -21
- package/dist/plugin.js.map +1 -1
- package/dist/rules/no-angular-bypass-security-trust-html.d.ts.map +1 -1
- package/dist/rules/no-angular-bypass-security-trust-html.js +4 -3
- package/dist/rules/no-angular-bypass-security-trust-html.js.map +1 -1
- package/dist/rules/no-angular-innerhtml-binding.js +1 -1
- package/dist/rules/no-angularjs-bypass-sce.d.ts.map +1 -1
- package/dist/rules/no-angularjs-bypass-sce.js +5 -4
- package/dist/rules/no-angularjs-bypass-sce.js.map +1 -1
- package/dist/rules/no-angularjs-enable-svg.d.ts.map +1 -1
- package/dist/rules/no-angularjs-enable-svg.js +2 -1
- package/dist/rules/no-angularjs-enable-svg.js.map +1 -1
- package/dist/rules/no-angularjs-ng-bind-html-without-sanitize.js +2 -2
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.d.ts.map +1 -1
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.js +8 -7
- package/dist/rules/no-angularjs-sce-resource-url-wildcard.js.map +1 -1
- package/dist/rules/no-child-process-exec.d.ts.map +1 -1
- package/dist/rules/no-child-process-exec.js +21 -17
- package/dist/rules/no-child-process-exec.js.map +1 -1
- package/dist/rules/no-child-process-shell-true.d.ts.map +1 -1
- package/dist/rules/no-child-process-shell-true.js +12 -10
- package/dist/rules/no-child-process-shell-true.js.map +1 -1
- package/dist/rules/no-document-domain.d.ts.map +1 -1
- package/dist/rules/no-document-domain.js +2 -1
- package/dist/rules/no-document-domain.js.map +1 -1
- package/dist/rules/no-document-execcommand-insert-html.d.ts.map +1 -1
- package/dist/rules/no-document-execcommand-insert-html.js +4 -3
- package/dist/rules/no-document-execcommand-insert-html.js.map +1 -1
- package/dist/rules/no-document-parse-html-unsafe.d.ts.map +1 -1
- package/dist/rules/no-document-parse-html-unsafe.js +6 -5
- package/dist/rules/no-document-parse-html-unsafe.js.map +1 -1
- package/dist/rules/no-document-write.d.ts.map +1 -1
- package/dist/rules/no-document-write.js +2 -1
- package/dist/rules/no-document-write.js.map +1 -1
- package/dist/rules/no-domparser-html-without-sanitization.d.ts.map +1 -1
- package/dist/rules/no-domparser-html-without-sanitization.js +3 -2
- package/dist/rules/no-domparser-html-without-sanitization.js.map +1 -1
- package/dist/rules/no-domparser-svg-without-sanitization.d.ts.map +1 -1
- package/dist/rules/no-domparser-svg-without-sanitization.js +3 -2
- package/dist/rules/no-domparser-svg-without-sanitization.js.map +1 -1
- package/dist/rules/no-dynamic-import-unsafe-url.js +1 -1
- package/dist/rules/no-electron-dangerous-blink-features.d.ts.map +1 -1
- package/dist/rules/no-electron-dangerous-blink-features.js +14 -11
- package/dist/rules/no-electron-dangerous-blink-features.js.map +1 -1
- package/dist/rules/no-electron-expose-raw-ipc-renderer.d.ts.map +1 -1
- package/dist/rules/no-electron-expose-raw-ipc-renderer.js +19 -18
- package/dist/rules/no-electron-expose-raw-ipc-renderer.js.map +1 -1
- package/dist/rules/no-electron-insecure-certificate-error-handler.d.ts.map +1 -1
- package/dist/rules/no-electron-insecure-certificate-error-handler.js +15 -9
- package/dist/rules/no-electron-insecure-certificate-error-handler.js.map +1 -1
- package/dist/rules/no-electron-insecure-certificate-verify-proc.d.ts.map +1 -1
- package/dist/rules/no-electron-insecure-certificate-verify-proc.js +12 -8
- package/dist/rules/no-electron-insecure-certificate-verify-proc.js.map +1 -1
- package/dist/rules/no-electron-insecure-permission-request-handler.d.ts.map +1 -1
- package/dist/rules/no-electron-insecure-permission-request-handler.js +12 -8
- package/dist/rules/no-electron-insecure-permission-request-handler.js.map +1 -1
- package/dist/rules/no-electron-permission-check-handler-allow-all.d.ts.map +1 -1
- package/dist/rules/no-electron-permission-check-handler-allow-all.js +8 -7
- package/dist/rules/no-electron-permission-check-handler-allow-all.js.map +1 -1
- package/dist/rules/no-electron-unchecked-ipc-sender.d.ts.map +1 -1
- package/dist/rules/no-electron-unchecked-ipc-sender.js +14 -10
- package/dist/rules/no-electron-unchecked-ipc-sender.js.map +1 -1
- package/dist/rules/no-electron-unrestricted-navigation.d.ts.map +1 -1
- package/dist/rules/no-electron-unrestricted-navigation.js +15 -11
- package/dist/rules/no-electron-unrestricted-navigation.js.map +1 -1
- package/dist/rules/no-electron-untrusted-open-external.d.ts.map +1 -1
- package/dist/rules/no-electron-untrusted-open-external.js +11 -9
- package/dist/rules/no-electron-untrusted-open-external.js.map +1 -1
- package/dist/rules/no-electron-webview-allowpopups.d.ts.map +1 -1
- package/dist/rules/no-electron-webview-allowpopups.js +7 -6
- package/dist/rules/no-electron-webview-allowpopups.js.map +1 -1
- package/dist/rules/no-electron-webview-insecure-webpreferences.d.ts.map +1 -1
- package/dist/rules/no-electron-webview-insecure-webpreferences.js +9 -8
- package/dist/rules/no-electron-webview-insecure-webpreferences.js.map +1 -1
- package/dist/rules/no-electron-webview-node-integration.d.ts.map +1 -1
- package/dist/rules/no-electron-webview-node-integration.js +9 -8
- package/dist/rules/no-electron-webview-node-integration.js.map +1 -1
- package/dist/rules/no-html-method.d.ts.map +1 -1
- package/dist/rules/no-html-method.js +3 -2
- package/dist/rules/no-html-method.js.map +1 -1
- package/dist/rules/no-http-request-to-insecure-protocol.d.ts.map +1 -1
- package/dist/rules/no-http-request-to-insecure-protocol.js +13 -10
- package/dist/rules/no-http-request-to-insecure-protocol.js.map +1 -1
- package/dist/rules/no-iframe-srcdoc.d.ts.map +1 -1
- package/dist/rules/no-iframe-srcdoc.js +13 -12
- package/dist/rules/no-iframe-srcdoc.js.map +1 -1
- package/dist/rules/no-inner-html.d.ts.map +1 -1
- package/dist/rules/no-inner-html.js +5 -4
- package/dist/rules/no-inner-html.js.map +1 -1
- package/dist/rules/no-insecure-random.d.ts.map +1 -1
- package/dist/rules/no-insecure-random.js +12 -10
- package/dist/rules/no-insecure-random.js.map +1 -1
- package/dist/rules/no-insecure-tls-agent-options.d.ts.map +1 -1
- package/dist/rules/no-insecure-tls-agent-options.js +10 -9
- package/dist/rules/no-insecure-tls-agent-options.js.map +1 -1
- package/dist/rules/no-insecure-url.d.ts.map +1 -1
- package/dist/rules/no-insecure-url.js +11 -10
- package/dist/rules/no-insecure-url.js.map +1 -1
- package/dist/rules/no-location-javascript-url.d.ts.map +1 -1
- package/dist/rules/no-location-javascript-url.js +11 -8
- package/dist/rules/no-location-javascript-url.js.map +1 -1
- package/dist/rules/no-message-event-without-origin-check.d.ts.map +1 -1
- package/dist/rules/no-message-event-without-origin-check.js +25 -29
- package/dist/rules/no-message-event-without-origin-check.js.map +1 -1
- package/dist/rules/no-node-tls-check-server-identity-bypass.d.ts.map +1 -1
- package/dist/rules/no-node-tls-check-server-identity-bypass.js +14 -13
- package/dist/rules/no-node-tls-check-server-identity-bypass.js.map +1 -1
- package/dist/rules/no-node-tls-legacy-protocol.d.ts.map +1 -1
- package/dist/rules/no-node-tls-legacy-protocol.js +6 -5
- package/dist/rules/no-node-tls-legacy-protocol.js.map +1 -1
- package/dist/rules/no-node-tls-reject-unauthorized-zero.d.ts.map +1 -1
- package/dist/rules/no-node-tls-reject-unauthorized-zero.js +11 -8
- package/dist/rules/no-node-tls-reject-unauthorized-zero.js.map +1 -1
- package/dist/rules/no-node-tls-security-level-zero.d.ts.map +1 -1
- package/dist/rules/no-node-tls-security-level-zero.js +6 -5
- package/dist/rules/no-node-tls-security-level-zero.js.map +1 -1
- package/dist/rules/no-node-vm-run-in-context.d.ts.map +1 -1
- package/dist/rules/no-node-vm-run-in-context.js +25 -21
- package/dist/rules/no-node-vm-run-in-context.js.map +1 -1
- package/dist/rules/no-node-vm-source-text-module.d.ts.map +1 -1
- package/dist/rules/no-node-vm-source-text-module.js +21 -17
- package/dist/rules/no-node-vm-source-text-module.js.map +1 -1
- package/dist/rules/no-node-worker-threads-eval.d.ts.map +1 -1
- package/dist/rules/no-node-worker-threads-eval.js +26 -21
- package/dist/rules/no-node-worker-threads-eval.js.map +1 -1
- package/dist/rules/no-nonnull-assertion-on-security-input.d.ts.map +1 -1
- package/dist/rules/no-nonnull-assertion-on-security-input.js +5 -4
- package/dist/rules/no-nonnull-assertion-on-security-input.js.map +1 -1
- package/dist/rules/no-postmessage-star-origin.d.ts.map +1 -1
- package/dist/rules/no-postmessage-star-origin.js +3 -2
- package/dist/rules/no-postmessage-star-origin.js.map +1 -1
- package/dist/rules/no-postmessage-without-origin-allowlist.d.ts.map +1 -1
- package/dist/rules/no-postmessage-without-origin-allowlist.js +10 -7
- package/dist/rules/no-postmessage-without-origin-allowlist.js.map +1 -1
- package/dist/rules/no-range-create-contextual-fragment.d.ts.map +1 -1
- package/dist/rules/no-range-create-contextual-fragment.js +8 -7
- package/dist/rules/no-range-create-contextual-fragment.js.map +1 -1
- package/dist/rules/no-script-src-data-url.d.ts.map +1 -1
- package/dist/rules/no-script-src-data-url.js +9 -8
- package/dist/rules/no-script-src-data-url.js.map +1 -1
- package/dist/rules/no-script-text.d.ts.map +1 -1
- package/dist/rules/no-script-text.js +2 -1
- package/dist/rules/no-script-text.js.map +1 -1
- package/dist/rules/no-service-worker-unsafe-script-url.d.ts.map +1 -1
- package/dist/rules/no-service-worker-unsafe-script-url.js +3 -2
- package/dist/rules/no-service-worker-unsafe-script-url.js.map +1 -1
- package/dist/rules/no-set-html-unsafe.d.ts.map +1 -1
- package/dist/rules/no-set-html-unsafe.js +3 -2
- package/dist/rules/no-set-html-unsafe.js.map +1 -1
- package/dist/rules/no-trusted-types-policy-pass-through.d.ts.map +1 -1
- package/dist/rules/no-trusted-types-policy-pass-through.js +19 -18
- package/dist/rules/no-trusted-types-policy-pass-through.js.map +1 -1
- package/dist/rules/no-unsafe-alloc.d.ts.map +1 -1
- package/dist/rules/no-unsafe-alloc.js +4 -3
- package/dist/rules/no-unsafe-alloc.js.map +1 -1
- package/dist/rules/no-unsafe-cast-to-trusted-types.d.ts.map +1 -1
- package/dist/rules/no-unsafe-cast-to-trusted-types.js +8 -7
- package/dist/rules/no-unsafe-cast-to-trusted-types.js.map +1 -1
- package/dist/rules/no-window-open-without-noopener.d.ts.map +1 -1
- package/dist/rules/no-window-open-without-noopener.js +10 -7
- package/dist/rules/no-window-open-without-noopener.js.map +1 -1
- package/dist/rules/no-worker-blob-url.d.ts.map +1 -1
- package/dist/rules/no-worker-blob-url.js +3 -2
- package/dist/rules/no-worker-blob-url.js.map +1 -1
- package/dist/rules/no-worker-data-url.d.ts.map +1 -1
- package/dist/rules/no-worker-data-url.js +3 -2
- package/dist/rules/no-worker-data-url.js.map +1 -1
- package/package.json +38 -39
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-electron-webview-node-integration.js","sourceRoot":"","sources":["../../src/rules/no-electron-webview-node-integration.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,mBAAmB,GAAG,CAAC,IAAgC,EAAW,EAAE,CACtE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-electron-webview-node-integration.js","sourceRoot":"","sources":["../../src/rules/no-electron-webview-node-integration.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,mBAAmB,GAAG,CAAC,IAAgC,EAAW,EAAE,CACtE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa;IAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAE/C,MAAM,mBAAmB,GAAG,CAAC,aAAoC,EAAU,EAAE;IACzE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CAAC,aAAqB,EAAW,EAAE;IAClE,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAEnD,OAAO,CACH,cAAc,KAAK,iBAAiB;QACpC,cAAc,KAAK,4BAA4B,CAClD,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAC9B,cAA8C,EACvC,EAAE;IACT,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;QACjD,IAAI,OAAO,cAAc,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,cAAc,CAAC,KAAK,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;QAC1D,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,sBAAsB,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IACI,cAAc,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO;QACzD,OAAO,cAAc,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,EACtD,CAAC;QACC,OAAO,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CACrC,cAA8C,EACvC,EAAE;IACT,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IACI,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO;QAC9C,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EAC1C,CAAC;QACC,OAAO,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAiB;IACnE,MAAM,CAAC,OAAO;QACV,OAAO;YACH,iBAAiB,CAAC,IAAgC;gBAC9C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC1C,IAAI,aAAa,CAAC,IAAI,KAAK,cAAc,CAAC,YAAY,EAAE,CAAC;wBACrD,SAAS;oBACb,CAAC;oBAED,MAAM,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;oBAEzD,IAAI,0BAA0B,CAAC,aAAa,CAAC,EAAE,CAAC;wBAC5C,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;4BAClD,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,GAAG,CAAC,KAAK;gCACL,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;4BACvC,CAAC;4BACD,SAAS,EAAE,SAAS;4BACpB,IAAI,EAAE,aAAa;yBACtB,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,aAAa,KAAK,gBAAgB,EAAE,CAAC;wBACrC,SAAS;oBACb,CAAC;oBAED,IACI,CAAC,gCAAgC,CAAC,aAAa,CAAC,KAAK,CAAC,EACxD,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,aAAa;qBACtB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,+DAA+D;YACnE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,kGAAkG;SAC1G;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EACH,sEAAsE;SAC7E;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,sCAAsC;CAC/C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-html-method.d.ts","sourceRoot":"","sources":["../../src/rules/no-html-method.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-html-method.d.ts","sourceRoot":"","sources":["../../src/rules/no-html-method.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CA4CtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { createRule } from "../_internal/create-rule.js";
|
|
2
3
|
/** Rule implementation. */
|
|
3
4
|
const rule = createRule({
|
|
@@ -5,11 +6,11 @@ const rule = createRule({
|
|
|
5
6
|
return {
|
|
6
7
|
"CallExpression[arguments.length=1] > MemberExpression.callee[property.name='html']"(node) {
|
|
7
8
|
const parentCall = node.parent;
|
|
8
|
-
if (parentCall.type !==
|
|
9
|
+
if (parentCall.type !== AST_NODE_TYPES.CallExpression) {
|
|
9
10
|
return;
|
|
10
11
|
}
|
|
11
12
|
const [firstArgument] = parentCall.arguments;
|
|
12
|
-
if (firstArgument?.type ===
|
|
13
|
+
if (firstArgument?.type === AST_NODE_TYPES.Literal &&
|
|
13
14
|
(firstArgument.value === "" || firstArgument.value === null)) {
|
|
14
15
|
return;
|
|
15
16
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-html-method.js","sourceRoot":"","sources":["../../src/rules/no-html-method.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAgB;IAClE,MAAM,CAAC,OAAO;QACV,OAAO;YACH,oFAAoF,CAChF,IAA+B;gBAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;gBAE/B,IAAI,UAAU,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-html-method.js","sourceRoot":"","sources":["../../src/rules/no-html-method.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAgB;IAClE,MAAM,CAAC,OAAO;QACV,OAAO;YACH,oFAAoF,CAChF,IAA+B;gBAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;gBAE/B,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,cAAc,EAAE,CAAC;oBACpD,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC;gBAE7C,IACI,aAAa,EAAE,IAAI,KAAK,cAAc,CAAC,OAAO;oBAC9C,CAAC,aAAa,CAAC,KAAK,KAAK,EAAE,IAAI,aAAa,CAAC,KAAK,KAAK,IAAI,CAAC,EAC9D,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,4FAA4F;YAChG,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,4EAA4E;SACpF;QACD,QAAQ,EAAE;YACN,OAAO,EAAE,mDAAmD;SAC/D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-http-request-to-insecure-protocol.d.ts","sourceRoot":"","sources":["../../src/rules/no-http-request-to-insecure-protocol.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-http-request-to-insecure-protocol.d.ts","sourceRoot":"","sources":["../../src/rules/no-http-request-to-insecure-protocol.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAwEzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAmEtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,38 +1,41 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { arrayFirst } from "ts-extras";
|
|
2
3
|
import { createRule } from "../_internal/create-rule.js";
|
|
3
4
|
const getMemberPropertyName = (memberExpression) => {
|
|
4
5
|
if (!memberExpression.computed &&
|
|
5
|
-
memberExpression.property.type ===
|
|
6
|
+
memberExpression.property.type === AST_NODE_TYPES.Identifier) {
|
|
6
7
|
return memberExpression.property.name;
|
|
7
8
|
}
|
|
8
|
-
if (memberExpression.property.type ===
|
|
9
|
+
if (memberExpression.property.type === AST_NODE_TYPES.Literal &&
|
|
9
10
|
typeof memberExpression.property.value === "string") {
|
|
10
11
|
return memberExpression.property.value;
|
|
11
12
|
}
|
|
12
13
|
return undefined;
|
|
13
14
|
};
|
|
14
15
|
const getStaticStringValue = (node) => {
|
|
15
|
-
if (node.type ===
|
|
16
|
+
if (node.type === AST_NODE_TYPES.Literal &&
|
|
17
|
+
typeof node.value === "string") {
|
|
16
18
|
return node.value;
|
|
17
19
|
}
|
|
18
|
-
if (node.type ===
|
|
20
|
+
if (node.type === AST_NODE_TYPES.TemplateLiteral &&
|
|
21
|
+
node.expressions.length === 0) {
|
|
19
22
|
return arrayFirst(node.quasis)?.value.cooked ?? undefined;
|
|
20
23
|
}
|
|
21
24
|
return undefined;
|
|
22
25
|
};
|
|
23
|
-
const isInsecureHttpUrl = (value) => /^http:\/\//
|
|
26
|
+
const isInsecureHttpUrl = (value) => /^http:\/\//iv.test(value.trim());
|
|
24
27
|
const isTargetRequestMethod = (node) => {
|
|
25
|
-
if (node.callee.type ===
|
|
28
|
+
if (node.callee.type === AST_NODE_TYPES.Identifier) {
|
|
26
29
|
return node.callee.name === "fetch";
|
|
27
30
|
}
|
|
28
|
-
if (node.callee.type !==
|
|
31
|
+
if (node.callee.type !== AST_NODE_TYPES.MemberExpression) {
|
|
29
32
|
return false;
|
|
30
33
|
}
|
|
31
34
|
const methodName = getMemberPropertyName(node.callee);
|
|
32
35
|
if (methodName !== "request" && methodName !== "get") {
|
|
33
36
|
return false;
|
|
34
37
|
}
|
|
35
|
-
if (node.callee.object.type !==
|
|
38
|
+
if (node.callee.object.type !== AST_NODE_TYPES.Identifier) {
|
|
36
39
|
return false;
|
|
37
40
|
}
|
|
38
41
|
return (node.callee.object.name === "http" ||
|
|
@@ -48,7 +51,7 @@ const rule = createRule({
|
|
|
48
51
|
}
|
|
49
52
|
const [firstArgument] = node.arguments;
|
|
50
53
|
if (firstArgument === undefined ||
|
|
51
|
-
firstArgument.type ===
|
|
54
|
+
firstArgument.type === AST_NODE_TYPES.SpreadElement) {
|
|
52
55
|
return;
|
|
53
56
|
}
|
|
54
57
|
const firstArgumentValue = getStaticStringValue(firstArgument);
|
|
@@ -59,7 +62,7 @@ const rule = createRule({
|
|
|
59
62
|
context.report({
|
|
60
63
|
fix(fixer) {
|
|
61
64
|
const sourceText = context.sourceCode.getText(firstArgument);
|
|
62
|
-
const fixedSourceText = sourceText.replace(/^(?<quote>["'`]?)http:\/\//
|
|
65
|
+
const fixedSourceText = sourceText.replace(/^(?<quote>["'`]?)http:\/\//iv, "$<quote>https://");
|
|
63
66
|
if (fixedSourceText === sourceText) {
|
|
64
67
|
return null;
|
|
65
68
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-http-request-to-insecure-protocol.js","sourceRoot":"","sources":["../../src/rules/no-http-request-to-insecure-protocol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,qBAAqB,GAAG,CAC1B,gBAA2C,EACzB,EAAE;IACpB,IACI,CAAC,gBAAgB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-http-request-to-insecure-protocol.js","sourceRoot":"","sources":["../../src/rules/no-http-request-to-insecure-protocol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,qBAAqB,GAAG,CAC1B,gBAA2C,EACzB,EAAE;IACpB,IACI,CAAC,gBAAgB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU,EAC9D,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,IACI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO;QACzD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;QACC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CACzB,IAAyB,EACP,EAAE;IACpB,IACI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO;QACpC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAChC,CAAC;QACC,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IACI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,eAAe;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;QACC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;IAC9D,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAW,EAAE,CACjD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAEtC,MAAM,qBAAqB,GAAG,CAAC,IAA6B,EAAW,EAAE;IACrE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CACtC,CAAC;AACN,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAiB;IACnE,MAAM,CAAC,OAAO;QACV,OAAO;YACH,cAAc,CAAC,IAA6B;gBACxC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAEvC,IACI,aAAa,KAAK,SAAS;oBAC3B,aAAa,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa,EACrD,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;gBAE/D,IACI,OAAO,kBAAkB,KAAK,QAAQ;oBACtC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EACxC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,GAAG,CAAC,KAAK;wBACL,MAAM,UAAU,GACZ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;wBAC9C,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CACtC,8BAA8B,EAC9B,kBAAkB,CACrB,CAAC;wBAEF,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;4BACjC,OAAO,IAAI,CAAC;wBAChB,CAAC;wBAED,OAAO,KAAK,CAAC,WAAW,CACpB,aAAa,EACb,eAAe,CAClB,CAAC;oBACN,CAAC;oBACD,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,aAAa;iBACtB,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,iEAAiE;YACrE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,kGAAkG;SAC1G;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EAAE,uDAAuD;SACnE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,sCAAsC;CAC/C,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-iframe-srcdoc.d.ts","sourceRoot":"","sources":["../../src/rules/no-iframe-srcdoc.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-iframe-srcdoc.d.ts","sourceRoot":"","sources":["../../src/rules/no-iframe-srcdoc.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAqFzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CA+HtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,21 +1,22 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { getFullTypeChecker, getNodeTypeAsString, } from "../_internal/ast-utils.js";
|
|
2
3
|
import { createRule } from "../_internal/create-rule.js";
|
|
3
4
|
import { getMemberPropertyName, getStaticJsxAttributeStringValue, getStaticStringValue, } from "../_internal/estree-utils.js";
|
|
4
5
|
const isJsxIframeElement = (node) => {
|
|
5
|
-
if (node.name.type !==
|
|
6
|
+
if (node.name.type !== AST_NODE_TYPES.JSXIdentifier) {
|
|
6
7
|
return false;
|
|
7
8
|
}
|
|
8
9
|
return node.name.name.toLowerCase() === "iframe";
|
|
9
10
|
};
|
|
10
11
|
const getJsxAttributeName = (attributeNode) => {
|
|
11
|
-
if (attributeNode.name.type !==
|
|
12
|
+
if (attributeNode.name.type !== AST_NODE_TYPES.JSXIdentifier) {
|
|
12
13
|
return undefined;
|
|
13
14
|
}
|
|
14
15
|
return attributeNode.name.name.toLowerCase();
|
|
15
16
|
};
|
|
16
17
|
const isCreateElementIFrameCall = (node) => {
|
|
17
|
-
if (node.type !==
|
|
18
|
-
node.callee.type !==
|
|
18
|
+
if (node.type !== AST_NODE_TYPES.CallExpression ||
|
|
19
|
+
node.callee.type !== AST_NODE_TYPES.MemberExpression) {
|
|
19
20
|
return false;
|
|
20
21
|
}
|
|
21
22
|
if (getMemberPropertyName(node.callee) !== "createElement") {
|
|
@@ -23,7 +24,7 @@ const isCreateElementIFrameCall = (node) => {
|
|
|
23
24
|
}
|
|
24
25
|
const [firstArgument] = node.arguments;
|
|
25
26
|
return (firstArgument !== undefined &&
|
|
26
|
-
firstArgument.type !==
|
|
27
|
+
firstArgument.type !== AST_NODE_TYPES.SpreadElement &&
|
|
27
28
|
getStaticStringValue(firstArgument) === "iframe");
|
|
28
29
|
};
|
|
29
30
|
const isLikelyIFrameElement = (node, context, fullTypeChecker) => {
|
|
@@ -36,11 +37,11 @@ const isLikelyIFrameElement = (node, context, fullTypeChecker) => {
|
|
|
36
37
|
if (isCreateElementIFrameCall(node)) {
|
|
37
38
|
return true;
|
|
38
39
|
}
|
|
39
|
-
if (node.type ===
|
|
40
|
+
if (node.type === AST_NODE_TYPES.Identifier) {
|
|
40
41
|
const normalizedName = node.name.toLowerCase();
|
|
41
42
|
return normalizedName === "frame" || normalizedName.endsWith("iframe");
|
|
42
43
|
}
|
|
43
|
-
if (node.type !==
|
|
44
|
+
if (node.type !== AST_NODE_TYPES.MemberExpression) {
|
|
44
45
|
return false;
|
|
45
46
|
}
|
|
46
47
|
const propertyName = getMemberPropertyName(node);
|
|
@@ -55,7 +56,7 @@ const rule = createRule({
|
|
|
55
56
|
const fullTypeChecker = getFullTypeChecker(context);
|
|
56
57
|
return {
|
|
57
58
|
AssignmentExpression(node) {
|
|
58
|
-
if (node.left.type !==
|
|
59
|
+
if (node.left.type !== AST_NODE_TYPES.MemberExpression) {
|
|
59
60
|
return;
|
|
60
61
|
}
|
|
61
62
|
if (getMemberPropertyName(node.left) !== "srcdoc") {
|
|
@@ -73,7 +74,7 @@ const rule = createRule({
|
|
|
73
74
|
});
|
|
74
75
|
},
|
|
75
76
|
CallExpression(node) {
|
|
76
|
-
if (node.callee.type !==
|
|
77
|
+
if (node.callee.type !== AST_NODE_TYPES.MemberExpression) {
|
|
77
78
|
return;
|
|
78
79
|
}
|
|
79
80
|
const methodName = getMemberPropertyName(node.callee);
|
|
@@ -83,12 +84,12 @@ const rule = createRule({
|
|
|
83
84
|
}
|
|
84
85
|
const [firstArgument, secondArgument] = node.arguments;
|
|
85
86
|
if (firstArgument === undefined ||
|
|
86
|
-
firstArgument.type ===
|
|
87
|
+
firstArgument.type === AST_NODE_TYPES.SpreadElement ||
|
|
87
88
|
getStaticStringValue(firstArgument) !== "srcdoc") {
|
|
88
89
|
return;
|
|
89
90
|
}
|
|
90
91
|
if (secondArgument === undefined ||
|
|
91
|
-
secondArgument.type ===
|
|
92
|
+
secondArgument.type === AST_NODE_TYPES.SpreadElement ||
|
|
92
93
|
getStaticStringValue(secondArgument) === "") {
|
|
93
94
|
return;
|
|
94
95
|
}
|
|
@@ -105,7 +106,7 @@ const rule = createRule({
|
|
|
105
106
|
return;
|
|
106
107
|
}
|
|
107
108
|
for (const attributeNode of node.attributes) {
|
|
108
|
-
if (attributeNode.type !==
|
|
109
|
+
if (attributeNode.type !== AST_NODE_TYPES.JSXAttribute) {
|
|
109
110
|
continue;
|
|
110
111
|
}
|
|
111
112
|
if (getJsxAttributeName(attributeNode) !== "srcdoc") {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-iframe-srcdoc.js","sourceRoot":"","sources":["../../src/rules/no-iframe-srcdoc.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EACH,qBAAqB,EACrB,gCAAgC,EAChC,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AAKtC,MAAM,kBAAkB,GAAG,CAAC,IAAgC,EAAW,EAAE;IACrE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-iframe-srcdoc.js","sourceRoot":"","sources":["../../src/rules/no-iframe-srcdoc.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EACH,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EACH,qBAAqB,EACrB,gCAAgC,EAChC,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AAKtC,MAAM,kBAAkB,GAAG,CAAC,IAAgC,EAAW,EAAE;IACrE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CACxB,aAAoC,EAClB,EAAE;IACpB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,IAAmB,EAAW,EAAE;IAC/D,IACI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,cAAc;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EACtD,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAEvC,OAAO,CACH,aAAa,KAAK,SAAS;QAC3B,aAAa,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa;QACnD,oBAAoB,CAAC,aAAa,CAAC,KAAK,QAAQ,CACnD,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC1B,IAAmB,EACnB,OAA4B,EAC5B,eAAsD,EAC/C,EAAE;IACT,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAErE,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAE/C,OAAO,cAAc,KAAK,OAAO,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAiB;IACnE,MAAM,CAAC,OAAO;QACV,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO;YACH,oBAAoB,CAAC,IAAmC;gBACpD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;oBACrD,OAAO;gBACX,CAAC;gBAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAChD,OAAO;gBACX,CAAC;gBAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,qBAAqB,CAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,OAAO,EACP,eAAe,CAClB,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,IAAI,CAAC,KAAK;iBACnB,CAAC,CAAC;YACP,CAAC;YACD,cAAc,CAAC,IAA6B;gBACxC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;oBACvD,OAAO;gBACX,CAAC;gBAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAEtD,IACI,UAAU,KAAK,cAAc;oBAC7B,UAAU,KAAK,gBAAgB,EACjC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAEvD,IACI,aAAa,KAAK,SAAS;oBAC3B,aAAa,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa;oBACnD,oBAAoB,CAAC,aAAa,CAAC,KAAK,QAAQ,EAClD,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IACI,cAAc,KAAK,SAAS;oBAC5B,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa;oBACpD,oBAAoB,CAAC,cAAc,CAAC,KAAK,EAAE,EAC7C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,qBAAqB,CAClB,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,OAAO,EACP,eAAe,CAClB,EACH,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,cAAc;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,iBAAiB,CAAC,IAAgC;gBAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5B,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC1C,IAAI,aAAa,CAAC,IAAI,KAAK,cAAc,CAAC,YAAY,EAAE,CAAC;wBACrD,SAAS;oBACb,CAAC;oBAED,IAAI,mBAAmB,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;wBAClD,SAAS;oBACb,CAAC;oBAED,IACI,gCAAgC,CAC5B,aAAa,CAAC,KAAK,CACtB,KAAK,EAAE,EACV,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,aAAa;qBACtB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,gGAAgG;YACpG,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,8EAA8E;SACtF;QACD,QAAQ,EAAE;YACN,OAAO,EACH,uFAAuF;SAC9F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-inner-html.d.ts","sourceRoot":"","sources":["../../src/rules/no-inner-html.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-inner-html.d.ts","sourceRoot":"","sources":["../../src/rules/no-inner-html.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAoFtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,20 +1,21 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { getFullTypeChecker, getNodeTypeAsString, } from "../_internal/ast-utils.js";
|
|
2
3
|
import { createRule } from "../_internal/create-rule.js";
|
|
3
|
-
const isEmptyStringLiteral = (node) => node.type ===
|
|
4
|
+
const isEmptyStringLiteral = (node) => node.type === AST_NODE_TYPES.Literal && node.value === "";
|
|
4
5
|
/** Rule implementation. */
|
|
5
6
|
const rule = createRule({
|
|
6
7
|
create(context) {
|
|
7
8
|
const fullTypeChecker = getFullTypeChecker(context);
|
|
8
9
|
const mightBeHTMLElement = (node) => {
|
|
9
10
|
const nodeType = getNodeTypeAsString(fullTypeChecker, node, context);
|
|
10
|
-
return /HTML.*Element/
|
|
11
|
+
return /HTML.*Element/v.test(nodeType) || nodeType === "any";
|
|
11
12
|
};
|
|
12
13
|
return {
|
|
13
14
|
"AssignmentExpression[left.type='MemberExpression'][left.property.name=/^(?:innerHTML|outerHTML)$/]"(node) {
|
|
14
15
|
if (isEmptyStringLiteral(node.right)) {
|
|
15
16
|
return;
|
|
16
17
|
}
|
|
17
|
-
if (node.left.type !==
|
|
18
|
+
if (node.left.type !== AST_NODE_TYPES.MemberExpression) {
|
|
18
19
|
return;
|
|
19
20
|
}
|
|
20
21
|
if (!mightBeHTMLElement(node.left.object)) {
|
|
@@ -26,7 +27,7 @@ const rule = createRule({
|
|
|
26
27
|
});
|
|
27
28
|
},
|
|
28
29
|
"CallExpression[arguments.length=2] > MemberExpression.callee[property.name='insertAdjacentHTML']"(node) {
|
|
29
|
-
if (node.parent.type !==
|
|
30
|
+
if (node.parent.type !== AST_NODE_TYPES.CallExpression) {
|
|
30
31
|
return;
|
|
31
32
|
}
|
|
32
33
|
const secondArgument = node.parent.arguments[1];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-inner-html.js","sourceRoot":"","sources":["../../src/rules/no-inner-html.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,oBAAoB,GAAG,CAAC,IAAmB,EAAW,EAAE,CAC1D,IAAI,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-inner-html.js","sourceRoot":"","sources":["../../src/rules/no-inner-html.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EACH,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,oBAAoB,GAAG,CAAC,IAAmB,EAAW,EAAE,CAC1D,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;AAE9D,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAGpD;IACE,MAAM,CAAC,OAAO;QACV,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEpD,MAAM,kBAAkB,GAAG,CAAC,IAAmB,EAAW,EAAE;YACxD,MAAM,QAAQ,GAAG,mBAAmB,CAChC,eAAe,EACf,IAAI,EACJ,OAAO,CACV,CAAC;YAEF,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC;QACjE,CAAC,CAAC;QAEF,OAAO;YACH,oGAAoG,CAChG,IAAmC;gBAEnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnC,OAAO;gBACX,CAAC;gBAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;oBACrD,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,aAAa;oBACxB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;YACD,kGAAkG,CAC9F,IAA+B;gBAE/B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,cAAc,EAAE,CAAC;oBACrD,OAAO;gBACX,CAAC;gBAED,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAEhD,IACI,cAAc,KAAK,SAAS;oBAC5B,oBAAoB,CAAC,cAAc,CAAC,EACtC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,sBAAsB;oBACjC,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,oFAAoF;YACxF,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,2EAA2E;SACnF;QACD,QAAQ,EAAE;YACN,WAAW,EACP,6DAA6D;YACjE,oBAAoB,EAChB,mDAAmD;SAC1D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,eAAe;CACxB,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-random.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-random.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-insecure-random.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-random.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAezD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkHtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,16 +1,18 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { arrayIncludes, isDefined, setHas } from "ts-extras";
|
|
3
4
|
import { getFullTypeChecker, getNodeTypeAsString, } from "../_internal/ast-utils.js";
|
|
4
5
|
import { createRule } from "../_internal/create-rule.js";
|
|
5
6
|
const bannedRandomLibraries = [
|
|
6
7
|
"chance",
|
|
7
|
-
"random-number",
|
|
8
|
-
"random-int",
|
|
9
8
|
"random-float",
|
|
9
|
+
"random-int",
|
|
10
|
+
"random-number",
|
|
10
11
|
"random-seed",
|
|
11
12
|
"unique-random",
|
|
12
13
|
];
|
|
13
|
-
const
|
|
14
|
+
const bannedRandomLibrarySet = new Set(bannedRandomLibraries);
|
|
15
|
+
const isBannedRandomLibrary = (value) => setHas(bannedRandomLibrarySet, value);
|
|
14
16
|
/** Rule implementation. */
|
|
15
17
|
const rule = createRule({
|
|
16
18
|
create(context) {
|
|
@@ -19,7 +21,7 @@ const rule = createRule({
|
|
|
19
21
|
"CallExpression > MemberExpression[property.name='pseudoRandomBytes']"(node) {
|
|
20
22
|
const isUnsafe = isDefined(fullTypeChecker)
|
|
21
23
|
? arrayIncludes(["any", "Crypto"], getNodeTypeAsString(fullTypeChecker, node.object, context))
|
|
22
|
-
: node.object.type ===
|
|
24
|
+
: node.object.type === AST_NODE_TYPES.Identifier &&
|
|
23
25
|
node.object.name === "crypto";
|
|
24
26
|
if (!isUnsafe) {
|
|
25
27
|
return;
|
|
@@ -32,7 +34,7 @@ const rule = createRule({
|
|
|
32
34
|
"CallExpression > MemberExpression[property.name='random']"(node) {
|
|
33
35
|
const isUnsafe = isDefined(fullTypeChecker)
|
|
34
36
|
? arrayIncludes(["any", "Math"], getNodeTypeAsString(fullTypeChecker, node.object, context))
|
|
35
|
-
: node.object.type ===
|
|
37
|
+
: node.object.type === AST_NODE_TYPES.Identifier &&
|
|
36
38
|
node.object.name === "Math";
|
|
37
39
|
if (!isUnsafe) {
|
|
38
40
|
return;
|
|
@@ -45,11 +47,11 @@ const rule = createRule({
|
|
|
45
47
|
"CallExpression[callee.name='require'][arguments.length=1]"(node) {
|
|
46
48
|
const [sourceArgument] = node.arguments;
|
|
47
49
|
if (!isDefined(sourceArgument) ||
|
|
48
|
-
sourceArgument.type !==
|
|
50
|
+
sourceArgument.type !== AST_NODE_TYPES.Literal ||
|
|
49
51
|
typeof sourceArgument.value !== "string") {
|
|
50
52
|
return;
|
|
51
53
|
}
|
|
52
|
-
const requireName = parse(basename(sourceArgument.value)).name;
|
|
54
|
+
const requireName = path.parse(path.basename(sourceArgument.value)).name;
|
|
53
55
|
if (!isBannedRandomLibrary(requireName)) {
|
|
54
56
|
return;
|
|
55
57
|
}
|
|
@@ -63,7 +65,7 @@ const rule = createRule({
|
|
|
63
65
|
if (typeof sourceText !== "string") {
|
|
64
66
|
return;
|
|
65
67
|
}
|
|
66
|
-
if (!isBannedRandomLibrary(basename(sourceText))) {
|
|
68
|
+
if (!isBannedRandomLibrary(path.basename(sourceText))) {
|
|
67
69
|
return;
|
|
68
70
|
}
|
|
69
71
|
context.report({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-random.js","sourceRoot":"","sources":["../../src/rules/no-insecure-random.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"no-insecure-random.js","sourceRoot":"","sources":["../../src/rules/no-insecure-random.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACH,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,qBAAqB,GAAG;IAC1B,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,eAAe;IACf,aAAa;IACb,eAAe;CACT,CAAC;AACX,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAE9D,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAW,EAAE,CACrD,MAAM,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;AAE1C,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAgB;IAClE,MAAM,CAAC,OAAO;QACV,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO;YACH,sEAAsE,CAClE,IAA+B;gBAE/B,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC;oBACvC,CAAC,CAAC,aAAa,CACT,CAAC,KAAK,EAAE,QAAQ,CAAC,EACjB,mBAAmB,CACf,eAAe,EACf,IAAI,CAAC,MAAM,EACX,OAAO,CACV,CACJ;oBACH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU;wBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;YACD,2DAA2D,CACvD,IAA+B;gBAE/B,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC;oBACvC,CAAC,CAAC,aAAa,CACT,CAAC,KAAK,EAAE,MAAM,CAAC,EACf,mBAAmB,CACf,eAAe,EACf,IAAI,CAAC,MAAM,EACX,OAAO,CACV,CACJ;oBACH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU;wBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;gBAElC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;YACD,2DAA2D,CACvD,IAA6B;gBAE7B,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAExC,IACI,CAAC,SAAS,CAAC,cAAc,CAAC;oBAC1B,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO;oBAC9C,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EAC1C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC1B,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CACtC,CAAC,IAAI,CAAC;gBAEP,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;YACD,iBAAiB,CAAC,IAAI;gBAClB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAErC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;oBACpD,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,SAAS;oBACpB,IAAI;iBACP,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,gHAAgH;YACpH,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,gFAAgF;SACxF;QACD,QAAQ,EAAE;YACN,OAAO,EACH,qFAAqF;SAC5F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,oBAAoB;CAC7B,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-tls-agent-options.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-tls-agent-options.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-insecure-tls-agent-options.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-tls-agent-options.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AA8CzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAkDtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,21 +1,21 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { createRule } from "../_internal/create-rule.js";
|
|
2
|
-
const isFalseLiteral = (node) => node.type ===
|
|
3
|
+
const isFalseLiteral = (node) => node.type === AST_NODE_TYPES.Literal && node.value === false;
|
|
3
4
|
const getObjectPropertyName = (propertyNode) => {
|
|
4
5
|
if (propertyNode.computed) {
|
|
5
6
|
return undefined;
|
|
6
7
|
}
|
|
7
|
-
if (propertyNode.key.type ===
|
|
8
|
+
if (propertyNode.key.type === AST_NODE_TYPES.Identifier) {
|
|
8
9
|
return propertyNode.key.name;
|
|
9
10
|
}
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
}
|
|
14
|
-
return undefined;
|
|
11
|
+
return typeof propertyNode.key.value === "string"
|
|
12
|
+
? propertyNode.key.value
|
|
13
|
+
: undefined;
|
|
15
14
|
};
|
|
16
15
|
const findRejectUnauthorizedFalseProperty = (objectExpression) => {
|
|
17
16
|
for (const propertyNode of objectExpression.properties) {
|
|
18
|
-
if (propertyNode.type !==
|
|
17
|
+
if (propertyNode.type !== AST_NODE_TYPES.Property ||
|
|
18
|
+
propertyNode.kind !== "init") {
|
|
19
19
|
continue;
|
|
20
20
|
}
|
|
21
21
|
if (getObjectPropertyName(propertyNode) !== "rejectUnauthorized") {
|
|
@@ -38,7 +38,8 @@ const rule = createRule({
|
|
|
38
38
|
}
|
|
39
39
|
context.report({
|
|
40
40
|
fix(fixer) {
|
|
41
|
-
if (insecureOptionProperty.value.type !==
|
|
41
|
+
if (insecureOptionProperty.value.type !==
|
|
42
|
+
AST_NODE_TYPES.Literal ||
|
|
42
43
|
insecureOptionProperty.value.value !== false) {
|
|
43
44
|
return null;
|
|
44
45
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-tls-agent-options.js","sourceRoot":"","sources":["../../src/rules/no-insecure-tls-agent-options.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,cAAc,GAAG,CAAC,IAAgC,EAAW,EAAE,CACjE,IAAI,CAAC,IAAI,KAAK,
|
|
1
|
+
{"version":3,"file":"no-insecure-tls-agent-options.js","sourceRoot":"","sources":["../../src/rules/no-insecure-tls-agent-options.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzD,MAAM,cAAc,GAAG,CAAC,IAAgC,EAAW,EAAE,CACjE,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;AAEjE,MAAM,qBAAqB,GAAG,CAC1B,YAA+B,EACb,EAAE;IACpB,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;QACtD,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK;QACxB,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CACxC,gBAA2C,EACd,EAAE;IAC/B,KAAK,MAAM,YAAY,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;QACrD,IACI,YAAY,CAAC,IAAI,KAAK,cAAc,CAAC,QAAQ;YAC7C,YAAY,CAAC,IAAI,KAAK,MAAM,EAC9B,CAAC;YACC,SAAS;QACb,CAAC;QAED,IAAI,qBAAqB,CAAC,YAAY,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC/D,SAAS;QACb,CAAC;QAED,IAAI,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC;QACxB,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAiB;IACnE,MAAM,CAAC,OAAO;QACV,OAAO;YACH,gBAAgB,CAAC,IAA+B;gBAC5C,MAAM,sBAAsB,GACxB,mCAAmC,CAAC,IAAI,CAAC,CAAC;gBAE9C,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,GAAG,CAAC,KAAK;wBACL,IACI,sBAAsB,CAAC,KAAK,CAAC,IAAI;4BAC7B,cAAc,CAAC,OAAO;4BAC1B,sBAAsB,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,EAC9C,CAAC;4BACC,OAAO,IAAI,CAAC;wBAChB,CAAC;wBAED,OAAO,KAAK,CAAC,WAAW,CACpB,sBAAsB,CAAC,KAAK,EAC5B,MAAM,CACT,CAAC;oBACN,CAAC;oBACD,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,sBAAsB;iBAC/B,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,iEAAiE;YACrE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,2FAA2F;SACnG;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,OAAO,EACH,6EAA6E;SACpF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,+BAA+B;CACxC,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-url.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-url.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-insecure-url.d.ts","sourceRoot":"","sources":["../../src/rules/no-insecure-url.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,oDAAoD;AACpD,QAAA,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAuC,CAAC;AAE/E,kDAAkD;AAClD,QAAA,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAMvC,CAAC;AAEF,qEAAqE;AACrE,QAAA,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAAO,CAAC;AA4DxD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAqHtC,CAAC;AAEH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAC1E,eAAe,IAAI,CAAC"}
|
|
@@ -1,13 +1,14 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { createRule } from "../_internal/create-rule.js";
|
|
2
3
|
/** Default insecure-protocol blocklist patterns. */
|
|
3
|
-
const defaultBlocklist = [/^(?:ftp|http|telnet|ws):\/\//
|
|
4
|
+
const defaultBlocklist = [/^(?:ftp|http|telnet|ws):\/\//iv];
|
|
4
5
|
/** Default allowlisted literal URL exceptions. */
|
|
5
6
|
const defaultExceptions = [
|
|
6
|
-
/^http:(?:\/\/|\\u002f\\u002f)schemas\.microsoft\.com.*/
|
|
7
|
-
/^http:(?:\/\/|\\u002f\\u002f)schemas\.openxmlformats\.org.*/
|
|
8
|
-
/^http:(?:\/|\\u002f){2}localhost(?::|\/|\\u002f)*/
|
|
9
|
-
/^http:\/\/w{3}\.w3\.org\/1999\/xhtml/
|
|
10
|
-
/^http:\/\/w{3}\.w3\.org\/2000\/svg/
|
|
7
|
+
/^http:(?:\/\/|\\u002f\\u002f)schemas\.microsoft\.com.*/iv,
|
|
8
|
+
/^http:(?:\/\/|\\u002f\\u002f)schemas\.openxmlformats\.org.*/iv,
|
|
9
|
+
/^http:(?:\/|\\u002f){2}localhost(?::|\/|\\u002f)*/iv,
|
|
10
|
+
/^http:\/\/w{3}\.w3\.org\/1999\/xhtml/iv,
|
|
11
|
+
/^http:\/\/w{3}\.w3\.org\/2000\/svg/iv,
|
|
11
12
|
];
|
|
12
13
|
/** Default source-text exceptions for variable/template contexts. */
|
|
13
14
|
const defaultVariableExceptions = [];
|
|
@@ -29,10 +30,10 @@ const shouldAttemptFix = (variableExceptions, context, node) => {
|
|
|
29
30
|
const reportInsecureUrl = (context, node, replacementSourceText) => {
|
|
30
31
|
context.report({
|
|
31
32
|
fix(fixer) {
|
|
32
|
-
if (!/http:/
|
|
33
|
+
if (!/http:/iv.test(replacementSourceText)) {
|
|
33
34
|
return null;
|
|
34
35
|
}
|
|
35
|
-
return fixer.replaceText(node, replacementSourceText.replace(/http:/
|
|
36
|
+
return fixer.replaceText(node, replacementSourceText.replace(/http:/iv, "https:"));
|
|
36
37
|
},
|
|
37
38
|
messageId: "doNotUseInsecureUrl",
|
|
38
39
|
node,
|
|
@@ -50,8 +51,8 @@ const rule = createRule({
|
|
|
50
51
|
if (typeof node.value !== "string") {
|
|
51
52
|
return;
|
|
52
53
|
}
|
|
53
|
-
if (node.parent
|
|
54
|
-
node.parent.name.type ===
|
|
54
|
+
if (node.parent.type === AST_NODE_TYPES.JSXAttribute &&
|
|
55
|
+
node.parent.name.type === AST_NODE_TYPES.JSXIdentifier &&
|
|
55
56
|
node.parent.name.name === "xmlns") {
|
|
56
57
|
return;
|
|
57
58
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-insecure-url.js","sourceRoot":"","sources":["../../src/rules/no-insecure-url.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,oDAAoD;AACpD,MAAM,gBAAgB,GAAsB,CAAC,gCAAgC,CAAC,CAAC;AAE/E,kDAAkD;AAClD,MAAM,iBAAiB,GAAsB;IACzC,0DAA0D;IAC1D,+DAA+D;IAC/D,qDAAqD;IACrD,wCAAwC;IACxC,sCAAsC;CACzC,CAAC;AAEF,qEAAqE;AACrE,MAAM,yBAAyB,GAAsB,EAAE,CAAC;AAYxD,MAAM,sBAAsB,GAAG,CAAC,OAAwB,EAAU,EAAE;IAChE,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;QAC5B,2HAA2H;QAC3H,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,kJAAkJ;IAClJ,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,QAA2B,EAAE,KAAa,EAAW,EAAE,CACpE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,cAAc,GAAG,CAAC,QAA2B,EAAqB,EAAE,CACtE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9C,MAAM,gBAAgB,GAAG,CACrB,kBAAqC,EACrC,OAAkD,EAClD,IAAmB,EACZ,EAAE;IACT,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1D,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACtB,OAAkD,EAClD,IAAmB,EACnB,qBAA6B,EACzB,EAAE;IACN,OAAO,CAAC,MAAM,CAAC;QACX,GAAG,CAAC,KAAK;YACL,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,OAAO,KAAK,CAAC,WAAW,CACpB,IAAI,EACJ,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CACrD,CAAC;QACN,CAAC;QACD,SAAS,EAAE,qBAAqB;QAChC,IAAI;KACP,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAsB;IACxE,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,GAAG,CACzD,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAC/C,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,CAAC,GAAG,CAC5D,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAC/C,CAAC;QACF,MAAM,kBAAkB,GAAG,CACvB,OAAO,CAAC,aAAa,IAAI,yBAAyB,CACrD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpD,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IACI,IAAI,CAAC,MAAM,
|
|
1
|
+
{"version":3,"file":"no-insecure-url.js","sourceRoot":"","sources":["../../src/rules/no-insecure-url.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,oDAAoD;AACpD,MAAM,gBAAgB,GAAsB,CAAC,gCAAgC,CAAC,CAAC;AAE/E,kDAAkD;AAClD,MAAM,iBAAiB,GAAsB;IACzC,0DAA0D;IAC1D,+DAA+D;IAC/D,qDAAqD;IACrD,wCAAwC;IACxC,sCAAsC;CACzC,CAAC;AAEF,qEAAqE;AACrE,MAAM,yBAAyB,GAAsB,EAAE,CAAC;AAYxD,MAAM,sBAAsB,GAAG,CAAC,OAAwB,EAAU,EAAE;IAChE,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;QAC5B,2HAA2H;QAC3H,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,kJAAkJ;IAClJ,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,QAA2B,EAAE,KAAa,EAAW,EAAE,CACpE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,cAAc,GAAG,CAAC,QAA2B,EAAqB,EAAE,CACtE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9C,MAAM,gBAAgB,GAAG,CACrB,kBAAqC,EACrC,OAAkD,EAClD,IAAmB,EACZ,EAAE;IACT,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1D,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACtB,OAAkD,EAClD,IAAmB,EACnB,qBAA6B,EACzB,EAAE;IACN,OAAO,CAAC,MAAM,CAAC;QACX,GAAG,CAAC,KAAK;YACL,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,OAAO,KAAK,CAAC,WAAW,CACpB,IAAI,EACJ,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CACrD,CAAC;QACN,CAAC;QACD,SAAS,EAAE,qBAAqB;QAChC,IAAI;KACP,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,IAAI,GAAkC,UAAU,CAAsB;IACxE,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,GAAG,CACzD,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAC/C,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,CAAC,GAAG,CAC5D,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAC/C,CAAC;QACF,MAAM,kBAAkB,GAAG,CACvB,OAAO,CAAC,aAAa,IAAI,yBAAyB,CACrD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpD,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IACI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,YAAY;oBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,aAAa;oBACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EACnC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IACI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;oBAC/B,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EACjC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACvD,OAAO;gBACX,CAAC;gBAED,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,eAAe,CAAC,IAAI;gBAChB,IACI,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ;oBAClC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EACvC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,UAAU,GACZ,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC;oBACnD,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBAClC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,aAAa,GACf,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBACrC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE5C,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;oBAChC,OAAO;gBACX,CAAC;gBAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CACtC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CACnC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAEf,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC1D,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE;YACZ;gBACI,SAAS,EAAE,cAAc,CAAC,gBAAgB,CAAC;gBAC3C,UAAU,EAAE,cAAc,CAAC,iBAAiB,CAAC;gBAC7C,aAAa,EAAE,cAAc,CAAC,yBAAyB,CAAC;aAC3D;SACJ;QACD,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,WAAW,EACP,0FAA0F;YAC9F,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,6EAA6E;SACrF;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,mBAAmB,EAAE,2BAA2B;SACnD;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACR,SAAS,EAAE;wBACP,WAAW,EACP,0EAA0E;wBAC9E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,IAAI,EAAE,OAAO;qBAChB;oBACD,UAAU,EAAE;wBACR,WAAW,EACP,+FAA+F;wBACnG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,IAAI,EAAE,OAAO;qBAChB;oBACD,aAAa,EAAE;wBACX,WAAW,EACP,yGAAyG;wBAC7G,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,IAAI,EAAE,OAAO;qBAChB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,SAAS;KAClB;IACD,IAAI,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAEH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAC1E,eAAe,IAAI,CAAC;AACpB,iIAAiI"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"no-location-javascript-url.d.ts","sourceRoot":"","sources":["../../src/rules/no-location-javascript-url.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"no-location-javascript-url.d.ts","sourceRoot":"","sources":["../../src/rules/no-location-javascript-url.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AA2DzD,2BAA2B;AAC3B,QAAA,MAAM,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAmFtC,CAAC;AAEH,eAAe,IAAI,CAAC"}
|
|
@@ -1,28 +1,31 @@
|
|
|
1
|
+
import { AST_NODE_TYPES } from "@typescript-eslint/utils";
|
|
1
2
|
import { arrayFirst } from "ts-extras";
|
|
2
3
|
import { createRule } from "../_internal/create-rule.js";
|
|
3
4
|
const getMemberPropertyName = (memberExpression) => {
|
|
4
5
|
if (!memberExpression.computed &&
|
|
5
|
-
memberExpression.property.type ===
|
|
6
|
+
memberExpression.property.type === AST_NODE_TYPES.Identifier) {
|
|
6
7
|
return memberExpression.property.name;
|
|
7
8
|
}
|
|
8
|
-
if (memberExpression.property.type ===
|
|
9
|
+
if (memberExpression.property.type === AST_NODE_TYPES.Literal &&
|
|
9
10
|
typeof memberExpression.property.value === "string") {
|
|
10
11
|
return memberExpression.property.value;
|
|
11
12
|
}
|
|
12
13
|
return undefined;
|
|
13
14
|
};
|
|
14
15
|
const getStaticStringValue = (node) => {
|
|
15
|
-
if (node.type ===
|
|
16
|
+
if (node.type === AST_NODE_TYPES.Literal &&
|
|
17
|
+
typeof node.value === "string") {
|
|
16
18
|
return node.value;
|
|
17
19
|
}
|
|
18
|
-
if (node.type ===
|
|
20
|
+
if (node.type === AST_NODE_TYPES.TemplateLiteral &&
|
|
21
|
+
node.expressions.length === 0) {
|
|
19
22
|
return arrayFirst(node.quasis)?.value.cooked ?? undefined;
|
|
20
23
|
}
|
|
21
24
|
return undefined;
|
|
22
25
|
};
|
|
23
|
-
const isJavaScriptUrl = (value) => /^\s*javascript\s*:/
|
|
26
|
+
const isJavaScriptUrl = (value) => /^\s*javascript\s*:/iv.test(value);
|
|
24
27
|
const isLocationLikeLeftHand = (expression) => {
|
|
25
|
-
if (expression.type !==
|
|
28
|
+
if (expression.type !== AST_NODE_TYPES.MemberExpression) {
|
|
26
29
|
return false;
|
|
27
30
|
}
|
|
28
31
|
const propertyName = getMemberPropertyName(expression);
|
|
@@ -50,7 +53,7 @@ const rule = createRule({
|
|
|
50
53
|
});
|
|
51
54
|
},
|
|
52
55
|
CallExpression(node) {
|
|
53
|
-
if (node.callee.type !==
|
|
56
|
+
if (node.callee.type !== AST_NODE_TYPES.MemberExpression) {
|
|
54
57
|
return;
|
|
55
58
|
}
|
|
56
59
|
const methodName = getMemberPropertyName(node.callee);
|
|
@@ -61,7 +64,7 @@ const rule = createRule({
|
|
|
61
64
|
}
|
|
62
65
|
const [firstArgument] = node.arguments;
|
|
63
66
|
if (firstArgument === undefined ||
|
|
64
|
-
firstArgument.type ===
|
|
67
|
+
firstArgument.type === AST_NODE_TYPES.SpreadElement) {
|
|
65
68
|
return;
|
|
66
69
|
}
|
|
67
70
|
const argumentValue = getStaticStringValue(firstArgument);
|