eslint-plugin-sonarjs 1.0.4 → 2.0.0

package/lib/S5122/rule.js

@@ -0,0 +1,302 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5122/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const MESSAGE = `Make sure that enabling CORS is safe here.`;
+const SECONDARY_MESSAGE = 'Sensitive configuration';
+const ACCESS_CONTROL_ALLOW_ORIGIN = 'Access-Control-Allow-Origin';
+const ROUTINE_METHODS = new Set([
+    'all', // 'all' is a special method that matches any HTTP method
+    'checkout',
+    'copy',
+    'delete',
+    'get',
+    'head',
+    'lock',
+    'merge',
+    'mkactivity',
+    'mkcol',
+    'move',
+    'm-search',
+    'notify',
+    'options',
+    'patch',
+    'post',
+    'purge',
+    'put',
+    'report',
+    'search',
+    'subscribe',
+    'trace',
+    'unlock',
+    'unsubscribe',
+]);
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        schema: [
+            {
+                // internal parameter for rules having secondary locations
+                enum: [helpers_1.SONAR_RUNTIME],
+            },
+        ],
+    }),
+    create(context) {
+        return {
+            CallExpression(node) {
+                checkNodeHttp(context, node);
+                checkExpressCors(context, node);
+                checkExpressUserControlledOrigin(context, node);
+            },
+        };
+    },
+};
+/**
+ * Checks that the callback of http.createServer() does not set the 'Access-Control-Allow-Origin' header to '*'.
+ */
+function checkNodeHttp(context, node) {
+    // Check if the node is a call to the 'http.createServer' method
+    const fqn = (0, helpers_1.getFullyQualifiedName)(context, node.callee);
+    if (fqn !== 'http.createServer') {
+        return;
+    }
+    // Check if the first argument is defined
+    const arg0 = node.arguments[0];
+    if (!arg0) {
+        return;
+    }
+    // Check if the first argument is a callback function
+    const callback = (0, helpers_1.resolveFunction)(context, arg0);
+    if (!callback) {
+        return;
+    }
+    // Check if the callback has a response parameter
+    const resParameter = callback.params[1];
+    if (!resParameter || !(0, helpers_1.isIdentifier)(resParameter)) {
+        return;
+    }
+    // Retrieve the variable declaration of the response parameter
+    const resVariable = context.sourceCode.scopeManager
+        .getDeclaredVariables(callback)
+        .find(v => v.name === resParameter.name);
+    if (!resVariable) {
+        return;
+    }
+    // Check if the response parameter is used to set the 'Access-Control-Allow-Origin' header
+    const resUsages = resVariable.references;
+    for (const resUsage of resUsages) {
+        const identifier = resUsage.identifier;
+        // Find the first ancestor that is a call to the 'writeHead' method
+        const writeHeadCall = identifier?.parent?.parent;
+        if (!(writeHeadCall?.type === 'CallExpression' && (0, helpers_1.isCallingMethod)(writeHeadCall, 2, 'writeHead'))) {
+            continue;
+        }
+        // Check if the header argument of the 'writeHead' method is defined
+        const headerValue = (0, helpers_1.getValueOfExpression)(context, writeHeadCall.arguments[1], 'ObjectExpression');
+        if (!headerValue) {
+            continue;
+        }
+        // Check if the header argument contains the 'Access-Control-Allow-Origin' property
+        const accessProperty = (0, helpers_1.getProperty)(headerValue, ACCESS_CONTROL_ALLOW_ORIGIN, context);
+        if (!accessProperty) {
+            continue;
+        }
+        // Check if the 'Access-Control-Allow-Origin' property is set to '*'
+        const accessValue = (0, helpers_1.getValueOfExpression)(context, accessProperty.value, 'Literal');
+        if (accessValue?.value === '*') {
+            (0, helpers_1.report)(context, {
+                node: writeHeadCall.callee,
+                message: MESSAGE,
+            }, [(0, helpers_1.toSecondaryLocation)(accessProperty, SECONDARY_MESSAGE)]);
+        }
+    }
+}
+/**
+ * Checks that the callback of express.use() does not use cors() middleware with sensitive configuration.
+ */
+function checkExpressCors(context, node) {
+    // Check if the node is a call to the 'express.use' method
+    const fqn = (0, helpers_1.getFullyQualifiedName)(context, node.callee);
+    if (fqn !== 'express.use') {
+        return;
+    }
+    // Check if the first argument is defined
+    const argValue = (0, helpers_1.getValueOfExpression)(context, node.arguments[0], 'CallExpression');
+    if (!argValue) {
+        return;
+    }
+    // Check if the first argument is a call to the 'cors' method
+    const argFqn = (0, helpers_1.getFullyQualifiedName)(context, argValue);
+    if (argFqn !== 'cors') {
+        return;
+    }
+    // Check if the call to the 'cors' method has an argument (default configuration is sensitive)
+    const corsOptions = argValue.arguments[0];
+    if (!corsOptions) {
+        (0, helpers_1.report)(context, {
+            node,
+            message: MESSAGE,
+        });
+        return;
+    }
+    // Check if the argument of the 'cors' method is an object
+    const corsOptionsValue = (0, helpers_1.getValueOfExpression)(context, corsOptions, 'ObjectExpression');
+    if (!corsOptionsValue) {
+        return;
+    }
+    // Check if the 'origin' property is defined  (default configuration is sensitive)
+    const originProperty = (0, helpers_1.getProperty)(corsOptionsValue, 'origin', context);
+    if (!originProperty) {
+        (0, helpers_1.report)(context, {
+            node: node.callee,
+            message: MESSAGE,
+        }, [(0, helpers_1.toSecondaryLocation)(corsOptions, SECONDARY_MESSAGE)]);
+        return;
+    }
+    // Check if the 'origin' property is set to '*'
+    const originValue = (0, helpers_1.getValueOfExpression)(context, originProperty.value, 'Literal');
+    if (originValue?.value === '*') {
+        (0, helpers_1.report)(context, {
+            node: node.callee,
+            message: MESSAGE,
+        }, [(0, helpers_1.toSecondaryLocation)(originProperty, SECONDARY_MESSAGE)]);
+    }
+}
+/**
+ * Checks that the callback of express.<method>() does not set the 'Access-Control-Allow-Origin' header to '*'.
+ */
+function checkExpressUserControlledOrigin(context, node) {
+    // Check if the node is a call to an express routine method
+    const fqn = (0, helpers_1.getFullyQualifiedName)(context, node.callee)?.split('.');
+    if (!(fqn?.length === 2 && fqn[0] === 'express' && ROUTINE_METHODS.has(fqn[1]))) {
+        return;
+    }
+    // Check if the second argument is defined
+    const arg1 = node.arguments[1];
+    if (!arg1) {
+        return;
+    }
+    // Check if the second argument is a callback function
+    const callback = (0, helpers_1.resolveFunction)(context, arg1);
+    if (!callback) {
+        return;
+    }
+    // Check if the callback has a request parameter
+    const reqParameter = callback.params[0];
+    if (!reqParameter || !(0, helpers_1.isIdentifier)(reqParameter)) {
+        return;
+    }
+    // Check if the callback has a response parameter
+    const resParameter = callback.params[1];
+    if (!resParameter || !(0, helpers_1.isIdentifier)(resParameter)) {
+        return;
+    }
+    // Retrieve the variable declaration of the response parameter
+    const resVariable = context.sourceCode.scopeManager
+        .getDeclaredVariables(callback)
+        .find(v => v.name === resParameter.name);
+    if (!resVariable) {
+        return;
+    }
+    // Check if the response parameter is used to set the 'Access-Control-Allow-Origin' header
+    const resUsages = resVariable.references;
+    for (const resUsage of resUsages) {
+        const identifier = resUsage.identifier;
+        // Find the first ancestor that is a call to the 'setHeader' method
+        const setHeaderCall = identifier?.parent?.parent;
+        if (!(setHeaderCall?.type === 'CallExpression' && (0, helpers_1.isCallingMethod)(setHeaderCall, 2, 'setHeader'))) {
+            continue;
+        }
+        // Check if the first argument of the 'setHeader' method is 'Access-Control-Allow-Origin'
+        const headerName = (0, helpers_1.getValueOfExpression)(context, setHeaderCall.arguments[0], 'Literal');
+        if (!headerName ||
+            typeof headerName.value !== 'string' ||
+            headerName.value.toLowerCase() !== ACCESS_CONTROL_ALLOW_ORIGIN.toLowerCase()) {
+            continue;
+        }
+        // Retrieve the value of the header argument
+        const headerArg = setHeaderCall.arguments[1];
+        const headerValue = (0, helpers_1.getUniqueWriteUsageOrNode)(context, headerArg);
+        // Check if the header value is a user-controlled origin header
+        switch (headerValue.type) {
+            // Check if the header value is a call to the 'req.header' method with 'origin' as argument
+            case 'CallExpression': {
+                const callee = headerValue.callee;
+                const calleeText = context.sourceCode.getText(callee);
+                if (calleeText === `${reqParameter.name}.header`) {
+                    const originValue = (0, helpers_1.getValueOfExpression)(context, headerValue.arguments[0], 'Literal');
+                    if (typeof originValue?.value === 'string' &&
+                        originValue.value.toLowerCase() === 'origin' &&
+                        !isValidated(callback, headerArg)) {
+                        (0, helpers_1.report)(context, {
+                            node: setHeaderCall.callee,
+                            message: MESSAGE,
+                        }, [(0, helpers_1.toSecondaryLocation)(headerValue, SECONDARY_MESSAGE)]);
+                    }
+                }
+                break;
+            }
+            // Check if the header value is a member expression with 'req.headers.origin' as argument
+            case 'MemberExpression': {
+                const headerValueText = context.sourceCode.getText(headerValue);
+                if (headerValueText === `${reqParameter.name}.headers.origin` &&
+                    !isValidated(callback, headerArg)) {
+                    (0, helpers_1.report)(context, {
+                        node: setHeaderCall.callee,
+                        message: MESSAGE,
+                    }, [(0, helpers_1.toSecondaryLocation)(headerValue, SECONDARY_MESSAGE)]);
+                }
+                break;
+            }
+        }
+    }
+    /**
+     * Checks if the user-controlled origin header is validated in the callback through a comparison.
+     */
+    function isValidated(callback, header) {
+        if (!(0, helpers_1.isIdentifier)(header)) {
+            return false;
+        }
+        // Find the variable declaration of the header
+        const headerVariable = context.sourceCode.scopeManager
+            .acquire(callback)
+            ?.variables.find(v => v.name === header.name);
+        if (!headerVariable) {
+            return false;
+        }
+        // Check if the header is compared in a binary expression
+        const headerUsages = headerVariable.references;
+        for (const headerUsage of headerUsages) {
+            const identifier = headerUsage.identifier;
+            const validated = (0, helpers_1.findFirstMatchingLocalAncestor)(identifier, node => node.type === 'BinaryExpression' && ['==', '!=', '===', '!=='].includes(node.operator));
+            if (validated) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=rule.js.map

package/lib/S5122/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5122/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAaoB;AAEpB,4DAAoC;AAEpC,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAC7D,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AACpD,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,yDAAyD;IAChE,UAAU;IACV,MAAM;IACN,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,YAAY;IACZ,OAAO;IACP,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,OAAO;IACP,QAAQ;IACR,aAAa;CACd,CAAC,CAAC;AAEU,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,MAAM,EAAE;YACN;gBACE,0DAA0D;gBAC1D,IAAI,EAAE,CAAC,uBAAa,CAAC;aACtB;SACF;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,OAAO;YACL,cAAc,CAAC,IAA2B;gBACxC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC7B,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAChC,gCAAgC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,SAAS,aAAa,CAAC,OAAyB,EAAE,IAA2B;IAC3E,gEAAgE;IAChE,MAAM,GAAG,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,qDAAqD;IACrD,MAAM,QAAQ,GAAG,IAAA,yBAAe,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,iDAAiD;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,sBAAY,EAAC,YAAY,CAAC,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,8DAA8D;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY;SAChD,oBAAoB,CAAC,QAAQ,CAAC;SAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAiC,CAAC;QAE9D,mEAAmE;QACnE,MAAM,aAAa,GAAG,UAAU,EAAE,MAAM,EAAE,MAAiC,CAAC;QAC5E,IACE,CAAC,CAAC,aAAa,EAAE,IAAI,KAAK,gBAAgB,IAAI,IAAA,yBAAe,EAAC,aAAa,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,EAC7F,CAAC;YACD,SAAS;QACX,CAAC;QAED,oEAAoE;QACpE,MAAM,WAAW,GAAG,IAAA,8BAAoB,EACtC,OAAO,EACP,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAC1B,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,mFAAmF;QACnF,MAAM,cAAc,GAAG,IAAA,qBAAW,EAAC,WAAW,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,oEAAoE;QACpE,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnF,IAAI,WAAW,EAAE,KAAK,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAA,gBAAM,EACJ,OAAO,EACP;gBACE,IAAI,EAAE,aAAa,CAAC,MAAM;gBAC1B,OAAO,EAAE,OAAO;aACjB,EACD,CAAC,IAAA,6BAAmB,EAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAAyB,EAAE,IAA2B;IAC9E,0DAA0D;IAC1D,MAAM,GAAG,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,MAAM,MAAM,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,8FAA8F;IAC9F,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAA,gBAAM,EAAC,OAAO,EAAE;YACd,IAAI;YACJ,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,0DAA0D;IAC1D,MAAM,gBAAgB,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACxF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,kFAAkF;IAClF,MAAM,cAAc,GAAG,IAAA,qBAAW,EAAC,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAA,gBAAM,EACJ,OAAO,EACP;YACE,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,OAAO,EAAE,OAAO;SACjB,EACD,CAAC,IAAA,6BAAmB,EAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CACtD,CAAC;QACF,OAAO;IACT,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,WAAW,EAAE,KAAK,KAAK,GAAG,EAAE,CAAC;QAC/B,IAAA,gBAAM,EACJ,OAAO,EACP;YACE,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,OAAO,EAAE,OAAO;SACjB,EACD,CAAC,IAAA,6BAAmB,EAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gCAAgC,CAAC,OAAyB,EAAE,IAA2B;IAC9F,2DAA2D;IAC3D,MAAM,GAAG,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAA,yBAAe,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,sBAAY,EAAC,YAAY,CAAC,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,iDAAiD;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,sBAAY,EAAC,YAAY,CAAC,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,8DAA8D;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY;SAChD,oBAAoB,CAAC,QAAQ,CAAC;SAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAiC,CAAC;QAE9D,mEAAmE;QACnE,MAAM,aAAa,GAAG,UAAU,EAAE,MAAM,EAAE,MAAiC,CAAC;QAC5E,IACE,CAAC,CAAC,aAAa,EAAE,IAAI,KAAK,gBAAgB,IAAI,IAAA,yBAAe,EAAC,aAAa,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,EAC7F,CAAC;YACD,SAAS;QACX,CAAC;QAED,yFAAyF;QACzF,MAAM,UAAU,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxF,IACE,CAAC,UAAU;YACX,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACpC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,2BAA2B,CAAC,WAAW,EAAE,EAC5E,CAAC;YACD,SAAS;QACX,CAAC;QAED,4CAA4C;QAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAA,mCAAyB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElE,+DAA+D;QAC/D,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,2FAA2F;YAC3F,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;gBAClC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtD,IAAI,UAAU,KAAK,GAAG,YAAY,CAAC,IAAI,SAAS,EAAE,CAAC;oBACjD,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;oBACvF,IACE,OAAO,WAAW,EAAE,KAAK,KAAK,QAAQ;wBACtC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ;wBAC5C,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EACjC,CAAC;wBACD,IAAA,gBAAM,EACJ,OAAO,EACP;4BACE,IAAI,EAAE,aAAa,CAAC,MAAM;4BAC1B,OAAO,EAAE,OAAO;yBACjB,EACD,CAAC,IAAA,6BAAmB,EAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CACtD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,yFAAyF;YACzF,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAChE,IACE,eAAe,KAAK,GAAG,YAAY,CAAC,IAAI,iBAAiB;oBACzD,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EACjC,CAAC;oBACD,IAAA,gBAAM,EACJ,OAAO,EACP;wBACE,IAAI,EAAE,aAAa,CAAC,MAAM;wBAC1B,OAAO,EAAE,OAAO;qBACjB,EACD,CAAC,IAAA,6BAAmB,EAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CACtD,CAAC;gBACJ,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,QAAyB,EAAE,MAAmB;QACjE,IAAI,CAAC,IAAA,sBAAY,EAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8CAA8C;QAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY;aACnD,OAAO,CAAC,QAAQ,CAAC;YAClB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yDAAyD;QACzD,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC;QAC/C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,WAAW,CAAC,UAAiC,CAAC;YACjE,MAAM,SAAS,GAAG,IAAA,wCAA8B,EAC9C,UAAU,EACV,IAAI,CAAC,EAAE,CACL,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CACzF,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/lib/S5148/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S5148/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S5148/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S5148/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S5148/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Authorizing an opened window to access back to the originating window is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S5148/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S5148/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5148/rule.js

@@ -0,0 +1,89 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5148/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const REQUIRED_OPTION = 'noopener';
+const REQUIRED_OPTION_INDEX = 2;
+const URL_INDEX = 0;
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        messages: {
+            missingNoopener: 'Make sure not using "noopener" is safe here.',
+        },
+    }),
+    create(context) {
+        return {
+            CallExpression: (node) => {
+                if (!(0, helpers_1.isMethodCall)(node)) {
+                    return;
+                }
+                const { object, property } = node.callee;
+                const isWindowOpen = (0, helpers_1.isIdentifier)(property, 'open') &&
+                    ((0, helpers_1.isIdentifier)(object, 'window') || isThisWindow(object));
+                if (!isWindowOpen) {
+                    return;
+                }
+                const args = node.arguments;
+                const hasHttpUrl = URL_INDEX < args.length && isHttpUrl(context, args[URL_INDEX]);
+                if (!hasHttpUrl) {
+                    return;
+                }
+                if (args.length <= REQUIRED_OPTION_INDEX ||
+                    !hasRequiredOption(context, args[REQUIRED_OPTION_INDEX])) {
+                    context.report({
+                        messageId: 'missingNoopener',
+                        node: property,
+                    });
+                }
+            },
+        };
+    },
+};
+function isThisWindow(node) {
+    return (node.type === 'MemberExpression' &&
+        node.object.type === 'ThisExpression' &&
+        (0, helpers_1.isIdentifier)(node.property, 'window'));
+}
+function hasRequiredOption(context, argument) {
+    const stringOrNothing = extractString(context, argument);
+    return stringOrNothing?.includes(REQUIRED_OPTION);
+}
+function isHttpUrl(context, argument) {
+    const stringOrNothing = extractString(context, argument);
+    return (stringOrNothing !== undefined &&
+        (stringOrNothing.startsWith('http://') || stringOrNothing.startsWith('https://')));
+}
+function extractString(context, node) {
+    const literalNodeOrNothing = (0, helpers_1.getValueOfExpression)(context, node, 'Literal');
+    if (literalNodeOrNothing === undefined || !(0, helpers_1.isStringLiteral)(literalNodeOrNothing)) {
+        return undefined;
+    }
+    else {
+        return literalNodeOrNothing.value;
+    }
+}
+//# sourceMappingURL=rule.js.map

package/lib/S5148/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5148/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAMoB;AACpB,4DAAoC;AAEpC,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEP,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE;YACR,eAAe,EAAE,8CAA8C;SAChE;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,OAAO;YACL,cAAc,EAAE,CAAC,IAA2B,EAAE,EAAE;gBAC9C,IAAI,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;gBAEzC,MAAM,YAAY,GAChB,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC;oBAC9B,CAAC,IAAA,sBAAY,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;gBAE3D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO;gBACT,CAAC;gBAED,IACE,IAAI,CAAC,MAAM,IAAI,qBAAqB;oBACpC,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,EACxD,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC;wBACb,SAAS,EAAE,iBAAiB;wBAC5B,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,IAAiB;IACrC,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,kBAAkB;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB;QACrC,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAyB,EAAE,QAAqB;IACzE,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAqB;IACjE,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,CACL,eAAe,KAAK,SAAS;QAC7B,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAClF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB,EAAE,IAAiB;IACjE,MAAM,oBAAoB,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,oBAAoB,KAAK,SAAS,IAAI,CAAC,IAAA,yBAAe,EAAC,oBAAoB,CAAC,EAAE,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,OAAO,oBAAoB,CAAC,KAAK,CAAC;IACpC,CAAC;AACH,CAAC"}

package/lib/S5247/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S5247/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S5247/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S5247/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S5247/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Disabling auto-escaping in template engines is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S5247/javascript",
+        "requiresTypeChecking": true
+    }
+}

package/lib/S5247/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5247/rule.js

@@ -0,0 +1,120 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5247/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const MESSAGE = 'Make sure disabling auto-escaping feature is safe here.';
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        schema: [
+            {
+                // internal parameter for rules having secondary locations
+                enum: [helpers_1.SONAR_RUNTIME],
+            },
+        ],
+    }),
+    create(context) {
+        const services = context.sourceCode.parserServices;
+        function isEmptySanitizerFunction(sanitizerFunction) {
+            if (sanitizerFunction.params.length !== 1) {
+                return false;
+            }
+            const firstParam = sanitizerFunction.params[0];
+            if (firstParam.type !== 'Identifier') {
+                return false;
+            }
+            const firstParamName = firstParam.name;
+            if (sanitizerFunction.body.type !== 'BlockStatement') {
+                return (sanitizerFunction.body.type === 'Identifier' &&
+                    sanitizerFunction.body.name === firstParamName);
+            }
+            const { body } = sanitizerFunction.body;
+            if (body.length !== 1) {
+                return false;
+            }
+            const onlyStatement = body[0];
+            if (onlyStatement.type === 'ReturnStatement' &&
+                onlyStatement.argument &&
+                (0, helpers_1.isIdentifier)(onlyStatement.argument, firstParamName)) {
+                return true;
+            }
+            return false;
+        }
+        function isInvalidSanitizerFunction(node) {
+            let assignedFunction = (0, helpers_1.getValueOfExpression)(context, node, 'FunctionExpression') ??
+                (0, helpers_1.getValueOfExpression)(context, node, 'ArrowFunctionExpression');
+            if (!assignedFunction && node.type === 'Identifier' && (0, helpers_1.isRequiredParserServices)(services)) {
+                assignedFunction = (0, helpers_1.resolveFromFunctionReference)(context, node);
+            }
+            if (!!assignedFunction) {
+                return isEmptySanitizerFunction(assignedFunction);
+            }
+            return false;
+        }
+        return {
+            CallExpression: (node) => {
+                const callExpression = node;
+                const fqn = (0, helpers_1.getFullyQualifiedName)(context, callExpression);
+                if (fqn === 'handlebars.compile') {
+                    (0, helpers_1.checkSensitiveCall)(context, callExpression, 1, 'noEscape', true, MESSAGE);
+                }
+                if (fqn === 'marked.setOptions') {
+                    (0, helpers_1.checkSensitiveCall)(context, callExpression, 0, 'sanitize', false, MESSAGE);
+                }
+                if (fqn === 'markdown-it') {
+                    (0, helpers_1.checkSensitiveCall)(context, callExpression, 0, 'html', true, MESSAGE);
+                }
+            },
+            NewExpression: (node) => {
+                const newExpression = node;
+                if ((0, helpers_1.getFullyQualifiedName)(context, newExpression) === 'kramed.Renderer') {
+                    (0, helpers_1.checkSensitiveCall)(context, newExpression, 0, 'sanitize', false, MESSAGE);
+                }
+            },
+            AssignmentExpression: (node) => {
+                const assignmentExpression = node;
+                const { left, right } = assignmentExpression;
+                if (left.type !== 'MemberExpression') {
+                    return;
+                }
+                if (!((0, helpers_1.getFullyQualifiedName)(context, left) === 'mustache.escape' ||
+                    (isMustacheIdentifier(left.object) && (0, helpers_1.isIdentifier)(left.property, 'escape')))) {
+                    return;
+                }
+                if (isInvalidSanitizerFunction(right)) {
+                    (0, helpers_1.report)(context, {
+                        node: left,
+                        message: MESSAGE,
+                    });
+                }
+            },
+        };
+    },
+};
+function isMustacheIdentifier(node) {
+    return (0, helpers_1.isIdentifier)(node, 'Mustache');
+}
+//# sourceMappingURL=rule.js.map

package/lib/S5247/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5247/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAUoB;AACpB,4DAAoC;AAEpC,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAE7D,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,MAAM,EAAE;YACN;gBACE,0DAA0D;gBAC1D,IAAI,EAAE,CAAC,uBAAa,CAAC;aACtB;SACF;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QAEnD,SAAS,wBAAwB,CAC/B,iBAGkC;YAElC,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;YACvC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACrD,OAAO,CACL,iBAAiB,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;oBAC5C,iBAAiB,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,IACE,aAAa,CAAC,IAAI,KAAK,iBAAiB;gBACxC,aAAa,CAAC,QAAQ;gBACtB,IAAA,sBAAY,EAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,EACpD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,SAAS,0BAA0B,CAAC,IAAiB;YAOnD,IAAI,gBAAgB,GAClB,IAAA,8BAAoB,EAAC,OAAO,EAAE,IAAI,EAAE,oBAAoB,CAAC;gBACzD,IAAA,8BAAoB,EAAC,OAAO,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;YACjE,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAA,kCAAwB,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1F,gBAAgB,GAAG,IAAA,sCAA4B,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACvB,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO;YACL,cAAc,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACpC,MAAM,cAAc,GAAG,IAA6B,CAAC;gBACrD,MAAM,GAAG,GAAG,IAAA,+BAAqB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAC3D,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;oBACjC,IAAA,4BAAkB,EAAC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5E,CAAC;gBACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;oBAChC,IAAA,4BAAkB,EAAC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC7E,CAAC;gBACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;oBAC1B,IAAA,4BAAkB,EAAC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;YACD,aAAa,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACnC,MAAM,aAAa,GAAG,IAA4B,CAAC;gBACnD,IAAI,IAAA,+BAAqB,EAAC,OAAO,EAAE,aAAa,CAAC,KAAK,iBAAiB,EAAE,CAAC;oBACxE,IAAA,4BAAkB,EAAC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,oBAAoB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC1C,MAAM,oBAAoB,GAAG,IAAmC,CAAC;gBACjE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC;gBAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,IACE,CAAC,CACC,IAAA,+BAAqB,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,iBAAiB;oBAC1D,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAC7E,EACD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtC,IAAA,gBAAM,EAAC,OAAO,EAAE;wBACd,IAAI,EAAE,IAAI;wBACV,OAAO,EAAE,OAAO;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,oBAAoB,CAAC,IAAiB;IAC7C,OAAO,IAAA,sBAAY,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC"}

package/lib/S5254/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';