eslint-plugin-sonarjs 1.0.4 → 2.0.0

package/lib/S4423/rule.lib.js

@@ -0,0 +1,137 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S4423/javascript
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const SECURE_PROTOCOL_ALLOWED_VALUES = [
+    'TLSv1_2_method',
+    'TLSv1_2_client_method',
+    'TLSv1_2_server_method',
+    'TLS_method',
+    'TLS_client_method',
+    'TLS_server_method',
+];
+exports.rule = {
+    meta: {
+        messages: {
+            useMinimumTLS: "Change '{{option}}' to use at least TLS v1.2.",
+            useSecureTLS: "Change '{{option}}' to allow only secure TLS versions.",
+            AWSApiGateway: 'Change this code to enforce TLS 1.2 or above.',
+            AWSOpenElasticSearch: 'Omitting "tlsSecurityPolicy" enables a deprecated version of TLS. Set it to enforce TLS 1.2 or above.',
+        },
+    },
+    create(context) {
+        function getValueOfProperty(objectExpression, propertyName) {
+            const unsafeProperty = objectExpression && (0, helpers_1.getProperty)(objectExpression, propertyName, context);
+            if (unsafeProperty) {
+                return (0, helpers_1.getValueOfExpression)(context, unsafeProperty.value, 'Literal');
+            }
+            return undefined;
+        }
+        function checkMinMaxVersion(propertyName, property) {
+            if (property && (property.value === 'TLSv1.1' || property.value === 'TLSv1')) {
+                context.report({
+                    node: property,
+                    messageId: 'useMinimumTLS',
+                    data: {
+                        option: propertyName,
+                    },
+                });
+            }
+        }
+        function checkSslOptions(optionsNode) {
+            const options = (0, helpers_1.getValueOfExpression)(context, optionsNode, 'ObjectExpression');
+            const minVersion = getValueOfProperty(options, 'minVersion');
+            const maxVersion = getValueOfProperty(options, 'maxVersion');
+            checkMinMaxVersion('minVersion', minVersion);
+            checkMinMaxVersion('maxVersion', maxVersion);
+            const secureProtocol = getValueOfProperty(options, 'secureProtocol');
+            const secureProtocolValue = secureProtocol?.value?.toString() ?? '';
+            if (secureProtocol && !SECURE_PROTOCOL_ALLOWED_VALUES.includes(secureProtocolValue)) {
+                context.report({
+                    node: secureProtocol,
+                    messageId: 'useMinimumTLS',
+                    data: {
+                        option: 'secureProtocol',
+                    },
+                });
+            }
+            const secureOptions = (0, helpers_1.getProperty)(options, 'secureOptions', context);
+            if (secureOptions && !isValidSecureOptions(secureOptions.value)) {
+                context.report({
+                    node: secureOptions,
+                    messageId: 'useSecureTLS',
+                    data: {
+                        option: 'secureOptions',
+                    },
+                });
+            }
+        }
+        function isValidSecureOptions(options) {
+            const flags = [];
+            collectIdentifiersFromBinary(options, flags);
+            return (flags[0] === null ||
+                (flags.includes('SSL_OP_NO_TLSv1') && flags.includes('SSL_OP_NO_TLSv1_1')));
+        }
+        function collectIdentifiersFromBinary(node, acc) {
+            if (node.type === 'BinaryExpression') {
+                collectIdentifiersFromBinary(node.left, acc);
+                collectIdentifiersFromBinary(node.right, acc);
+            }
+            else if (node.type === 'MemberExpression' &&
+                (0, helpers_1.getFullyQualifiedName)(context, node.object) === 'constants' &&
+                node.property.type === 'Identifier') {
+                acc.push(node.property.name);
+            }
+            else {
+                // if part of expression is some complex node like function call, we set null on index 0
+                acc[0] = null;
+            }
+        }
+        return {
+            CallExpression: (node) => {
+                const callExpression = node;
+                const fqn = (0, helpers_1.getFullyQualifiedName)(context, callExpression);
+                // https://nodejs.org/api/https.html#https_https_get_options_callback
+                if (fqn === 'https.request') {
+                    checkSslOptions(callExpression.arguments[0]);
+                    checkSslOptions(callExpression.arguments[1]);
+                }
+                // https://github.com/request/request#tlsssl-protocol
+                if (fqn === 'request.get') {
+                    checkSslOptions(callExpression.arguments[0]);
+                }
+                // https://nodejs.org/api/tls.html#tls_tls_connect_options_callback
+                if (fqn === 'tls.connect') {
+                    checkSslOptions(callExpression.arguments[0]);
+                    checkSslOptions(callExpression.arguments[1]);
+                    checkSslOptions(callExpression.arguments[2]);
+                }
+                // https://nodejs.org/api/tls.html#tls_tls_createsecurecontext_options
+                if (fqn === 'tls.createSecureContext') {
+                    checkSslOptions(callExpression.arguments[0]);
+                }
+            },
+        };
+    },
+};
+//# sourceMappingURL=rule.lib.js.map

package/lib/S4423/rule.lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.lib.js","sourceRoot":"","sources":["../../S4423/rule.lib.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;AAI/D,wCAAsF;AAEtF,MAAM,8BAA8B,GAAG;IACrC,gBAAgB;IAChB,uBAAuB;IACvB,uBAAuB;IACvB,YAAY;IACZ,mBAAmB;IACnB,mBAAmB;CACpB,CAAC;AAEW,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE;QACJ,QAAQ,EAAE;YACR,aAAa,EAAE,+CAA+C;YAC9D,YAAY,EAAE,wDAAwD;YACtE,aAAa,EAAE,+CAA+C;YAC9D,oBAAoB,EAClB,uGAAuG;SAC1G;KACF;IACD,MAAM,CAAC,OAAyB;QAC9B,SAAS,kBAAkB,CACzB,gBAAqD,EACrD,YAAoB;YAEpB,MAAM,cAAc,GAClB,gBAAgB,IAAI,IAAA,qBAAW,EAAC,gBAAgB,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAA,8BAAoB,EAAC,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,SAAS,kBAAkB,CAAC,YAAoB,EAAE,QAAoC;YACpF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;gBAC7E,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE;wBACJ,MAAM,EAAE,YAAY;qBACrB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,SAAS,eAAe,CAAC,WAAoC;YAC3D,MAAM,OAAO,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;YAC/E,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC7D,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAC7C,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAE7C,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrE,MAAM,mBAAmB,GAAG,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpE,IAAI,cAAc,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACpF,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE;wBACJ,MAAM,EAAE,gBAAgB;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,aAAa,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YACrE,IAAI,aAAa,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,aAAa;oBACnB,SAAS,EAAE,cAAc;oBACzB,IAAI,EAAE;wBACJ,MAAM,EAAE,eAAe;qBACxB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,SAAS,oBAAoB,CAAC,OAAoB;YAChD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,CACL,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;gBACjB,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAC3E,CAAC;QACJ,CAAC;QAED,SAAS,4BAA4B,CAAC,IAAiB,EAAE,GAAsB;YAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACrC,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC7C,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;iBAAM,IACL,IAAI,CAAC,IAAI,KAAK,kBAAkB;gBAChC,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,WAAW;gBAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EACnC,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,wFAAwF;gBACxF,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO;YACL,cAAc,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACpC,MAAM,cAAc,GAAG,IAA6B,CAAC;gBACrD,MAAM,GAAG,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAC3D,qEAAqE;gBACrE,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;oBAC5B,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7C,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,qDAAqD;gBACrD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;oBAC1B,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,mEAAmE;gBACnE,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;oBAC1B,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7C,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7C,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,sEAAsE;gBACtE,IAAI,GAAG,KAAK,yBAAyB,EAAE,CAAC;oBACtC,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/lib/S4426/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S4426/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S4426/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S4426/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S4426/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Cryptographic keys should be robust",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S4426/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S4426/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S4426/rule.js

@@ -0,0 +1,138 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S4426/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const MINIMAL_MODULUS_LENGTH = 2048;
+const MINIMAL_DIVISOR_LENGTH = 224;
+const WEAK_CURVES = [
+    'secp112r1',
+    'secp112r2',
+    'secp128r1',
+    'secp128r2',
+    'secp160k1',
+    'secp160r1',
+    'secp160r2',
+    'secp160r2',
+    'secp192k1',
+    'secp192r1',
+    'prime192v2',
+    'prime192v3',
+    'sect113r1',
+    'sect113r2',
+    'sect131r1',
+    'sect131r2',
+    'sect163k1',
+    'sect163r1',
+    'sect163r2',
+    'sect193r1',
+    'sect193r2',
+    'c2tnb191v1',
+    'c2tnb191v2',
+    'c2tnb191v3',
+];
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        messages: {
+            modulusLength: 'Use a modulus length of at least {{minimalLength}} bits for {{algorithm}} cipher algorithm.',
+            divisorLength: 'Use a divisor length of at least {{minimalLength}} bits for {{algorithm}} cipher algorithm.',
+            strongerCurve: `{{curve}} doesn't provide enough security. Use a stronger curve.`,
+        },
+    }),
+    create(context) {
+        function getNumericValue(node) {
+            const literal = (0, helpers_1.getValueOfExpression)(context, node, 'Literal');
+            if (literal && typeof literal.value === 'number') {
+                return literal.value;
+            }
+            return undefined;
+        }
+        function checkRsaAndDsaOptions(algorithm, options) {
+            const modulusProperty = (0, helpers_1.getProperty)(options, 'modulusLength', context);
+            const modulusLength = getNumericValue(modulusProperty?.value);
+            if (modulusProperty && modulusLength && modulusLength < MINIMAL_MODULUS_LENGTH) {
+                context.report({
+                    node: modulusProperty,
+                    messageId: 'modulusLength',
+                    data: {
+                        minimalLength: MINIMAL_MODULUS_LENGTH.toString(),
+                        algorithm,
+                    },
+                });
+            }
+            const divisorProperty = (0, helpers_1.getProperty)(options, 'divisorLength', context);
+            const divisorLength = getNumericValue(divisorProperty?.value);
+            if (divisorProperty && divisorLength && divisorLength < MINIMAL_DIVISOR_LENGTH) {
+                context.report({
+                    node: divisorProperty,
+                    messageId: 'divisorLength',
+                    data: {
+                        minimalLength: MINIMAL_DIVISOR_LENGTH.toString(),
+                        algorithm,
+                    },
+                });
+            }
+        }
+        function checkEcCurve(options) {
+            const namedCurveProperty = (0, helpers_1.getProperty)(options, 'namedCurve', context);
+            const namedCurve = (0, helpers_1.getValueOfExpression)(context, namedCurveProperty?.value, 'Literal')?.value?.toString();
+            if (namedCurveProperty && namedCurve && WEAK_CURVES.includes(namedCurve)) {
+                context.report({
+                    node: namedCurveProperty,
+                    messageId: 'strongerCurve',
+                    data: {
+                        curve: namedCurve,
+                    },
+                });
+            }
+        }
+        return {
+            CallExpression: (node) => {
+                const callExpression = node;
+                const { callee } = callExpression;
+                if (callee.type === 'MemberExpression' &&
+                    (0, helpers_1.isIdentifier)(callee.property, 'generateKeyPair', 'generateKeyPairSync')) {
+                    if (callExpression.arguments.length < 2) {
+                        return;
+                    }
+                    const [algorithmArg, options] = callExpression.arguments;
+                    const optionsArg = (0, helpers_1.getValueOfExpression)(context, options, 'ObjectExpression');
+                    if (!optionsArg) {
+                        return;
+                    }
+                    const algorithm = (0, helpers_1.getValueOfExpression)(context, algorithmArg, 'Literal')?.value;
+                    if (algorithm === 'rsa' || algorithm === 'dsa') {
+                        checkRsaAndDsaOptions(algorithm, optionsArg);
+                    }
+                    else if (algorithm === 'ec') {
+                        checkEcCurve(optionsArg);
+                    }
+                }
+            },
+        };
+    },
+};
+//# sourceMappingURL=rule.js.map

package/lib/S4426/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S4426/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAA2F;AAC3F,4DAAoC;AAEpC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,WAAW,GAAG;IAClB,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC;AAEW,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE;YACR,aAAa,EACX,6FAA6F;YAC/F,aAAa,EACX,6FAA6F;YAC/F,aAAa,EAAE,kEAAkE;SAClF;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,SAAS,eAAe,CAAC,IAA6B;YACpD,MAAM,OAAO,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,KAAK,CAAC;YACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,OAAoB;YACpE,MAAM,eAAe,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,aAAa,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,eAAe,IAAI,aAAa,IAAI,aAAa,GAAG,sBAAsB,EAAE,CAAC;gBAC/E,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,eAAe;oBACrB,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE;wBACJ,aAAa,EAAE,sBAAsB,CAAC,QAAQ,EAAE;wBAChD,SAAS;qBACV;iBACF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,aAAa,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,eAAe,IAAI,aAAa,IAAI,aAAa,GAAG,sBAAsB,EAAE,CAAC;gBAC/E,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,eAAe;oBACrB,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE;wBACJ,aAAa,EAAE,sBAAsB,CAAC,QAAQ,EAAE;wBAChD,SAAS;qBACV;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,SAAS,YAAY,CAAC,OAAoB;YACxC,MAAM,kBAAkB,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,UAAU,GAAG,IAAA,8BAAoB,EACrC,OAAO,EACP,kBAAkB,EAAE,KAAK,EACzB,SAAS,CACV,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACrB,IAAI,kBAAkB,IAAI,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,kBAAkB;oBACxB,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE;wBACJ,KAAK,EAAE,UAAU;qBAClB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,cAAc,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACpC,MAAM,cAAc,GAAG,IAA6B,CAAC;gBACrD,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;gBAClC,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB;oBAClC,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,EACvE,CAAC;oBACD,IAAI,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxC,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC;oBACzD,MAAM,UAAU,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;oBAC9E,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,OAAO;oBACT,CAAC;oBACD,MAAM,SAAS,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC;oBAChF,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;wBAC/C,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;oBAC/C,CAAC;yBAAM,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBAC9B,YAAY,CAAC,UAAU,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/lib/S4502/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S4502/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S4502/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S4502/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S4502/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Disabling CSRF protections is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S4502/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S4502/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S4502/rule.js

@@ -0,0 +1,107 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S4502/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const CSURF_MODULE = 'csurf';
+const SAFE_METHODS = ['GET', 'HEAD', 'OPTIONS'];
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        schema: [
+            {
+                // internal parameter for rules having secondary locations
+                enum: [helpers_1.SONAR_RUNTIME],
+            },
+        ],
+    }),
+    create(context) {
+        let globalCsrfProtection = false;
+        let importedCsrfMiddleware = false;
+        function checkIgnoredMethods(node) {
+            if (node.value.type === 'ArrayExpression') {
+                const arrayExpr = node.value;
+                const unsafeMethods = arrayExpr.elements
+                    .filter(helpers_1.isLiteral)
+                    .filter(e => typeof e.value === 'string' && !SAFE_METHODS.includes(e.value));
+                if (unsafeMethods.length > 0) {
+                    const [first, ...rest] = unsafeMethods;
+                    (0, helpers_1.report)(context, {
+                        message: 'Make sure disabling CSRF protection is safe here.',
+                        node: first,
+                    }, rest.map(node => (0, helpers_1.toSecondaryLocation)(node)));
+                }
+            }
+        }
+        function isCsurfMiddleware(node) {
+            return node && (0, helpers_1.getFullyQualifiedName)(context, node) === CSURF_MODULE;
+        }
+        function checkCallExpression(callExpression) {
+            const { callee } = callExpression;
+            // require('csurf')
+            if ((0, helpers_1.isRequireModule)(callExpression, CSURF_MODULE)) {
+                importedCsrfMiddleware = true;
+            }
+            // csurf(...)
+            if ((0, helpers_1.getFullyQualifiedName)(context, callee) === CSURF_MODULE) {
+                const [args] = callExpression.arguments;
+                const ignoredMethods = (0, helpers_1.getProperty)(args, 'ignoreMethods', context);
+                if (ignoredMethods) {
+                    checkIgnoredMethods(ignoredMethods);
+                }
+            }
+            // app.use(csurf(...))
+            if (callee.type === 'MemberExpression') {
+                if ((0, helpers_1.isIdentifier)(callee.property, 'use') &&
+                    (0, helpers_1.flattenArgs)(context, callExpression.arguments).find(isCsurfMiddleware)) {
+                    globalCsrfProtection = true;
+                }
+                if ((0, helpers_1.isIdentifier)(callee.property, 'post', 'put', 'delete', 'patch') &&
+                    !globalCsrfProtection &&
+                    importedCsrfMiddleware &&
+                    !callExpression.arguments.some(arg => isCsurfMiddleware(arg))) {
+                    (0, helpers_1.report)(context, {
+                        message: 'Make sure not using CSRF protection is safe here.',
+                        node: callee,
+                    });
+                }
+            }
+        }
+        return {
+            Program() {
+                globalCsrfProtection = false;
+            },
+            CallExpression(node) {
+                checkCallExpression(node);
+            },
+            ImportDeclaration(node) {
+                if (node.source.value === CSURF_MODULE) {
+                    importedCsrfMiddleware = true;
+                }
+            },
+        };
+    },
+};
+//# sourceMappingURL=rule.js.map

package/lib/S4502/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S4502/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAWoB;AACpB,4DAAoC;AAEpC,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAEnC,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,MAAM,EAAE;YACN;gBACE,0DAA0D;gBAC1D,IAAI,EAAE,CAAC,uBAAa,CAAC;aACtB;SACF;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,IAAI,sBAAsB,GAAG,KAAK,CAAC;QAEnC,SAAS,mBAAmB,CAAC,IAAqB;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC7B,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ;qBACrC,MAAM,CAAC,mBAAS,CAAC;qBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC;oBACvC,IAAA,gBAAM,EACJ,OAAO,EACP;wBACE,OAAO,EAAE,mDAAmD;wBAC5D,IAAI,EAAE,KAAK;qBACZ,EACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAA,6BAAmB,EAAC,IAAI,CAAC,CAAC,CAC5C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,SAAS,iBAAiB,CAAC,IAA6B;YACtD,OAAO,IAAI,IAAI,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,YAAY,CAAC;QACvE,CAAC;QAED,SAAS,mBAAmB,CAAC,cAAqC;YAChE,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;YAElC,mBAAmB;YACnB,IAAI,IAAA,yBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;gBAClD,sBAAsB,GAAG,IAAI,CAAC;YAChC,CAAC;YAED,aAAa;YACb,IAAI,IAAA,+BAAqB,EAAC,OAAO,EAAE,MAAM,CAAC,KAAK,YAAY,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC;gBACxC,MAAM,cAAc,GAAG,IAAA,qBAAW,EAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;gBACnE,IAAI,cAAc,EAAE,CAAC;oBACnB,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,IACE,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACpC,IAAA,qBAAW,EAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EACtE,CAAC;oBACD,oBAAoB,GAAG,IAAI,CAAC;gBAC9B,CAAC;gBACD,IACE,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;oBAC/D,CAAC,oBAAoB;oBACrB,sBAAsB;oBACtB,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAC7D,CAAC;oBACD,IAAA,gBAAM,EAAC,OAAO,EAAE;wBACd,OAAO,EAAE,mDAAmD;wBAC5D,IAAI,EAAE,MAAM;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;gBACL,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;YACD,cAAc,CAAC,IAAiB;gBAC9B,mBAAmB,CAAC,IAA6B,CAAC,CAAC;YACrD,CAAC;YACD,iBAAiB,CAAC,IAAiB;gBACjC,IAAK,IAAiC,CAAC,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;oBACrE,sBAAsB,GAAG,IAAI,CAAC;gBAChC,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/lib/S4507/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S4507/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S4507/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S4507/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S4507/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Delivering code in production with debug features activated is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S4507/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S4507/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S4507/rule.js

@@ -0,0 +1,67 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S4507/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const ERRORHANDLER_MODULE = 'errorhandler';
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        messages: {
+            deactivateDebug: 'Make sure this debug feature is deactivated before delivering the code in production.',
+        },
+    }),
+    create(context) {
+        return {
+            CallExpression(node) {
+                const callExpression = node;
+                // app.use(...)
+                checkErrorHandlerMiddleware(context, callExpression);
+            },
+        };
+    },
+};
+function checkErrorHandlerMiddleware(context, callExpression) {
+    const { callee, arguments: args } = callExpression;
+    if ((0, helpers_1.isMemberWithProperty)(callee, 'use') &&
+        args.length > 0 &&
+        !isInsideConditional(context, callExpression)) {
+        for (const m of (0, helpers_1.flattenArgs)(context, args)) {
+            const middleware = (0, helpers_1.getUniqueWriteUsageOrNode)(context, m);
+            if (middleware.type === 'CallExpression' &&
+                (0, helpers_1.getFullyQualifiedName)(context, middleware) === ERRORHANDLER_MODULE) {
+                context.report({
+                    node: middleware,
+                    messageId: 'deactivateDebug',
+                });
+            }
+        }
+    }
+}
+function isInsideConditional(context, node) {
+    const ancestors = context.sourceCode.getAncestors(node);
+    return ancestors.some(ancestor => ancestor.type === 'IfStatement');
+}
+//# sourceMappingURL=rule.js.map

package/lib/S4507/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S4507/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAMoB;AACpB,4DAAoC;AAEpC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE9B,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE;YACR,eAAe,EACb,uFAAuF;SAC1F;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,OAAO;YACL,cAAc,CAAC,IAAiB;gBAC9B,MAAM,cAAc,GAAG,IAA6B,CAAC;gBACrD,eAAe;gBACf,2BAA2B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,2BAA2B,CAClC,OAAyB,EACzB,cAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC;IACnD,IACE,IAAA,8BAAoB,EAAC,MAAM,EAAE,KAAK,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,EAC7C,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAA,qBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAA,mCAAyB,EAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,IACE,UAAU,CAAC,IAAI,KAAK,gBAAgB;gBACpC,IAAA,+BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,KAAK,mBAAmB,EAClE,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE,iBAAiB;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAyB,EAAE,IAAiB;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;AACrE,CAAC"}

package/lib/S4524/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S4524/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map