eslint-plugin-sonarjs 1.0.4 → 2.0.0

package/lib/S6332/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S6332/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S6332/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S6332/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S6332/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Using unencrypted EFS file systems is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S6332/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S6332/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S6332/rule.js

@@ -0,0 +1,40 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S6332/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const cdk_1 = require("../helpers/aws/cdk");
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+exports.rule = (0, cdk_1.AwsCdkTemplate)({
+    'aws-cdk-lib.aws_efs.FileSystem': (0, cdk_1.AwsCdkCheckArguments)('FSEncryptionDisabled', false, 'encrypted', { primitives: { invalid: [false] } }),
+    'aws-cdk-lib.aws_efs.CfnFileSystem': (0, cdk_1.AwsCdkCheckArguments)(['CFSEncryptionOmitted', 'CFSEncryptionDisabled'], true, 'encrypted', { primitives: { valid: [true] } }),
+}, (0, helpers_1.generateMeta)(meta_json_1.default, {
+    messages: {
+        FSEncryptionDisabled: 'Make sure that using unencrypted file systems is safe here.',
+        CFSEncryptionDisabled: 'Make sure that using unencrypted file systems is safe here.',
+        CFSEncryptionOmitted: 'Omitting "encrypted" disables EFS encryption. Make sure it is safe here.',
+    },
+}));
+//# sourceMappingURL=rule.js.map

package/lib/S6332/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S6332/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAG/D,4CAA0E;AAC1E,wCAA0C;AAC1C,4DAAoC;AAEvB,QAAA,IAAI,GAAoB,IAAA,oBAAc,EACjD;IACE,gCAAgC,EAAE,IAAA,0BAAoB,EACpD,sBAAsB,EACtB,KAAK,EACL,WAAW,EACX,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACrC;IACD,mCAAmC,EAAE,IAAA,0BAAoB,EACvD,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EACjD,IAAI,EACJ,WAAW,EACX,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAClC;CACF,EACD,IAAA,sBAAY,EAAC,mBAA8B,EAAE;IAC3C,QAAQ,EAAE;QACR,oBAAoB,EAAE,6DAA6D;QACnF,qBAAqB,EAAE,6DAA6D;QACpF,oBAAoB,EAClB,0EAA0E;KAC7E;CACF,CAAC,CACH,CAAC"}

package/lib/S6333/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S6333/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S6333/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S6333/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S6333/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Creating public APIs is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S6333/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S6333/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S6333/rule.js

@@ -0,0 +1,129 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S6333/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const cdk_1 = require("../helpers/aws/cdk");
+const result_1 = require("../helpers/result");
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const REST_API_PROPERTIES_POSITION = 2;
+const RESOURCE_ADD_RESOURCE_PROPERTIES_POSITION = 1;
+const RESOURCE_ADD_METHOD_POSITION = 2;
+const REST_API_ROOT_PROPERTY = 'root';
+const DEFAULT_METHOD_OPTIONS = 'defaultMethodOptions';
+const AUTHORIZATION_TYPE = 'authorizationType';
+const NONE_AUTHORIZATION_TYPE = 'aws_cdk_lib.aws_apigateway.AuthorizationType.NONE';
+const ADD_METHOD = 'addMethod';
+const ADD_RESOURCE = 'addResource';
+const GET_RESOURCE = 'getResource';
+const PARENT_RESOURCE = 'parentResource';
+const messages = {
+    publicApi: 'Make sure that creating public APIs is safe here.',
+    omittedAuthorizationType: 'Omitting "authorizationType" disables authentication. Make sure it is safe here.',
+};
+const apigatewayChecker = (0, cdk_1.AwsCdkCheckArguments)(['omittedAuthorizationType', 'publicApi'], true, AUTHORIZATION_TYPE, { primitives: { invalid: ['NONE'] } });
+function consumersFactory(ctx) {
+    const defaultAuthorizationTypes = new Map();
+    const restApiDefaultCollector = defaultsCollector(REST_API_PROPERTIES_POSITION);
+    const resourceDefaultCollector = defaultsCollector(RESOURCE_ADD_RESOURCE_PROPERTIES_POSITION);
+    return {
+        'aws_cdk_lib.aws_apigateway.CfnMethod': apigatewayChecker,
+        'aws_cdk_lib.aws_apigatewayv2.CfnRoute': apigatewayChecker,
+        'aws_cdk_lib.aws_apigateway.RestApi': restApiDefaultCollector,
+        'aws_cdk_lib.aws_apigateway.RestApi.root': {
+            methods: [ADD_METHOD, ADD_RESOURCE, GET_RESOURCE, PARENT_RESOURCE],
+            callExpression: (expr, _ctx, fqn) => {
+                if (fqn.endsWith(ADD_METHOD)) {
+                    checkResourceMethod(expr);
+                }
+                else if (fqn.endsWith(ADD_RESOURCE)) {
+                    resourceDefaultCollector(expr);
+                }
+            },
+        },
+    };
+    function checkResourceMethod(expr) {
+        const properties = (0, result_1.getResultOfExpression)(ctx, expr).getArgument(RESOURCE_ADD_METHOD_POSITION);
+        const authorizationType = properties.getProperty(AUTHORIZATION_TYPE);
+        if (authorizationType.isFound && isSensitiveAuthorizationType(authorizationType.node)) {
+            ctx.report({
+                messageId: 'publicApi',
+                node: authorizationType.node,
+            });
+        }
+        else if (authorizationType.isMissing) {
+            const defaultAuthorizationType = getDefaultAuthorizationType(expr.callee);
+            if (defaultAuthorizationType == null) {
+                ctx.report({
+                    messageId: 'omittedAuthorizationType',
+                    node: authorizationType.node,
+                });
+            }
+            else if (isSensitiveAuthorizationType(defaultAuthorizationType)) {
+                ctx.report({
+                    messageId: 'publicApi',
+                    node: expr,
+                });
+            }
+        }
+    }
+    function getDefaultAuthorizationType(node) {
+        const resource = (0, helpers_1.getUniqueWriteUsageOrNode)(ctx, node);
+        if (defaultAuthorizationTypes.has(resource)) {
+            return defaultAuthorizationTypes.get(resource);
+        }
+        else if (isDefaultFromCallee(resource)) {
+            return getDefaultAuthorizationType(resource.callee);
+        }
+        else if (isDefaultFromObject(resource, ADD_METHOD, ADD_RESOURCE, REST_API_ROOT_PROPERTY)) {
+            return getDefaultAuthorizationType(resource.object);
+        }
+        else {
+            return undefined;
+        }
+    }
+    function defaultsCollector(position) {
+        return (expr) => {
+            const properties = (0, result_1.getResultOfExpression)(ctx, expr).getArgument(position);
+            const defaultMethodOptions = properties.getProperty(DEFAULT_METHOD_OPTIONS);
+            const authorizationType = defaultMethodOptions.getProperty(AUTHORIZATION_TYPE);
+            if (authorizationType.isFound) {
+                defaultAuthorizationTypes.set(expr, authorizationType.node);
+            }
+        };
+    }
+    function isSensitiveAuthorizationType(node) {
+        const fqn = (0, cdk_1.normalizeFQN)((0, helpers_1.getFullyQualifiedName)(ctx, node));
+        return fqn === NONE_AUTHORIZATION_TYPE;
+    }
+}
+function isDefaultFromObject(node, ...names) {
+    return node.type === 'MemberExpression' && names.some(name => (0, helpers_1.isMemberWithProperty)(node, name));
+}
+function isDefaultFromCallee(node) {
+    return node.type === 'CallExpression' && (0, helpers_1.isMethodCall)(node);
+}
+exports.rule = (0, cdk_1.AwsCdkTemplate)(consumersFactory, (0, helpers_1.generateMeta)(meta_json_1.default, { messages }));
+//# sourceMappingURL=rule.js.map

package/lib/S6333/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S6333/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAG/D,4CAAwF;AAExF,8CAA0D;AAC1D,wCAMoB;AACpB,4DAAoC;AAEpC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AACvC,MAAM,yCAAyC,GAAG,CAAC,CAAC;AACpD,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAEvC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAEtD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,uBAAuB,GAAG,mDAAmD,CAAC;AAEpF,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,MAAM,QAAQ,GAAG;IACf,SAAS,EAAE,mDAAmD;IAC9D,wBAAwB,EACtB,kFAAkF;CACrF,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAA,0BAAoB,EAC5C,CAAC,0BAA0B,EAAE,WAAW,CAAC,EACzC,IAAI,EACJ,kBAAkB,EAClB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CACtC,CAAC;AAEF,SAAS,gBAAgB,CAAC,GAAqB;IAC7C,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAc,CAAC;IACxD,MAAM,uBAAuB,GAAG,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;IAChF,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;IAE9F,OAAO;QACL,sCAAsC,EAAE,iBAAiB;QACzD,uCAAuC,EAAE,iBAAiB;QAC1D,oCAAoC,EAAE,uBAAuB;QAC7D,yCAAyC,EAAE;YACzC,OAAO,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC;YAElE,cAAc,EAAE,CAAC,IAAoB,EAAE,IAAsB,EAAE,GAAW,EAAE,EAAE;gBAC5E,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7B,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACtC,wBAAwB,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;SACF;KACF,CAAC;IAEF,SAAS,mBAAmB,CAAC,IAAoB;QAC/C,MAAM,UAAU,GAAG,IAAA,8BAAqB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QAC9F,MAAM,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,iBAAiB,CAAC,OAAO,IAAI,4BAA4B,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC;gBACT,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,iBAAiB,CAAC,IAAI;aAC7B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1E,IAAI,wBAAwB,IAAI,IAAI,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC;oBACT,SAAS,EAAE,0BAA0B;oBACrC,IAAI,EAAE,iBAAiB,CAAC,IAAI;iBAC7B,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,4BAA4B,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,MAAM,CAAC;oBACT,SAAS,EAAE,WAAW;oBACtB,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,2BAA2B,CAAC,IAAU;QAC7C,MAAM,QAAQ,GAAG,IAAA,mCAAyB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC3F,OAAO,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,iBAAiB,CAAC,QAAgB;QACzC,OAAO,CAAC,IAAoC,EAAE,EAAE;YAC9C,MAAM,UAAU,GAAG,IAAA,8BAAqB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1E,MAAM,oBAAoB,GAAG,UAAU,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;YAC5E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAC/E,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC9B,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,4BAA4B,CAAC,IAAU;QAC9C,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,IAAA,+BAAqB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,KAAK,uBAAuB,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU,EAAE,GAAG,KAAe;IACzD,OAAO,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAA,8BAAoB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IACrC,OAAO,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAEY,QAAA,IAAI,GAAoB,IAAA,oBAAc,EACjD,gBAAgB,EAChB,IAAA,sBAAY,EAAC,mBAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAC3D,CAAC"}

package/lib/S6351/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S6351/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S6351/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S6351/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S6351/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Regular expressions with the global flag should be used with caution",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S6351/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S6351/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S6351/rule.js

@@ -0,0 +1,168 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S6351/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const regex_1 = require("../helpers/regex");
+const meta_json_1 = __importDefault(require("./meta.json"));
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        schema: [
+            {
+                // internal parameter for rules having secondary locations
+                enum: [helpers_1.SONAR_RUNTIME],
+            },
+        ],
+    }),
+    create(context) {
+        const invocations = new Map();
+        const regexes = [];
+        const resets = new Set();
+        return {
+            'Literal:exit': (node) => {
+                extractRegex(node, regexes);
+            },
+            'CallExpression:exit': (node) => {
+                const callExpr = node;
+                extractRegex(node, regexes);
+                extractRegexInvocation(callExpr, regexes, invocations, context);
+                checkWhileConditionRegex(callExpr, context);
+            },
+            'MemberExpression:exit': (node) => {
+                extractResetRegex(node, regexes, resets, context);
+            },
+            'NewExpression:exit': (node) => {
+                extractRegex(node, regexes);
+            },
+            'Program:exit': () => {
+                regexes.forEach(regex => checkGlobalStickyRegex(regex, context));
+                invocations.forEach((usages, regex) => checkMultipleInputsRegex(regex, usages, resets, context));
+            },
+        };
+    },
+};
+function extractRegex(node, acc) {
+    if ((0, helpers_1.isRegexLiteral)(node)) {
+        const { flags } = node.regex;
+        acc.push({ node, flags });
+    }
+    else if ((0, regex_1.isRegExpConstructor)(node)) {
+        const flags = (0, regex_1.getFlags)(node) ?? '';
+        acc.push({ node, flags });
+    }
+}
+function extractRegexInvocation(callExpr, regexes, invocations, context) {
+    if ((0, helpers_1.isCallingMethod)(callExpr, 1, 'exec', 'test') &&
+        callExpr.callee.object.type === 'Identifier') {
+        const { object } = callExpr.callee;
+        const variable = (0, helpers_1.getVariableFromName)(context, object.name, callExpr);
+        if (variable) {
+            const value = (0, helpers_1.getUniqueWriteUsage)(context, variable.name, callExpr);
+            const regex = regexes.find(r => r.node === value);
+            if (regex?.flags.includes('g')) {
+                const usages = invocations.get(variable);
+                if (usages) {
+                    usages.push(callExpr);
+                }
+                else {
+                    invocations.set(variable, [callExpr]);
+                }
+            }
+        }
+    }
+}
+function extractResetRegex(node, regexes, resets, context) {
+    /* RegExp.prototype.lastIndex = ... */
+    if ((0, helpers_1.isDotNotation)(node) &&
+        node.object.type === 'Identifier' &&
+        node.property.name === 'lastIndex') {
+        const parent = (0, helpers_1.getParent)(context, node);
+        if (parent?.type === 'AssignmentExpression' && parent.left === node) {
+            const variable = (0, helpers_1.getVariableFromName)(context, node.object.name, node);
+            if (variable) {
+                const value = (0, helpers_1.getUniqueWriteUsage)(context, variable.name, node);
+                const regex = regexes.find(r => r.node === value);
+                if (regex) {
+                    resets.add(variable);
+                }
+            }
+        }
+    }
+}
+function checkWhileConditionRegex(callExpr, context) {
+    /* RegExp.prototype.exec() within while conditions */
+    if ((0, helpers_1.isMethodCall)(callExpr)) {
+        const { object, property } = callExpr.callee;
+        if (((0, helpers_1.isRegexLiteral)(object) || (0, regex_1.isRegExpConstructor)(object)) && property.name === 'exec') {
+            const flags = object.type === 'Literal' ? object.regex.flags : (0, regex_1.getFlags)(object);
+            if (flags?.includes('g') && isWithinWhileCondition(callExpr, context)) {
+                (0, helpers_1.report)(context, {
+                    message: 'Extract this regular expression to avoid infinite loop.',
+                    node: object,
+                });
+            }
+        }
+    }
+}
+function checkGlobalStickyRegex(regex, context) {
+    /* RegExp with `g` and `y` flags */
+    if (regex.flags.includes('g') && regex.flags.includes('y')) {
+        (0, helpers_1.report)(context, {
+            message: `Remove the 'g' flag from this regex as it is shadowed by the 'y' flag.`,
+            node: regex.node,
+        });
+    }
+}
+function checkMultipleInputsRegex(regex, usages, resets, context) {
+    /* RegExp.prototype.exec(input) / RegExp.prototype.test(input) */
+    if (!resets.has(regex)) {
+        const definition = regex.defs.find(def => def.type === 'Variable' && def.node.init);
+        const uniqueInputs = new Set(usages.map(callExpr => context.sourceCode.getText(callExpr.arguments[0])));
+        const regexReset = uniqueInputs.has(`''`) || uniqueInputs.has(`""`);
+        if (definition && uniqueInputs.size > 1 && !regexReset) {
+            const pattern = definition.node.init;
+            (0, helpers_1.report)(context, {
+                message: `Remove the 'g' flag from this regex as it is used on different inputs.`,
+                node: pattern,
+            }, usages.map((node, idx) => (0, helpers_1.toSecondaryLocation)(node, `Usage ${idx + 1}`)));
+        }
+    }
+}
+function isWithinWhileCondition(node, context) {
+    const ancestors = context.sourceCode.getAncestors(node);
+    let parent;
+    let child = node;
+    while ((parent = ancestors.pop()) !== undefined) {
+        if (helpers_1.functionLike.has(parent.type)) {
+            break;
+        }
+        if (parent.type === 'WhileStatement' || parent.type === 'DoWhileStatement') {
+            return parent.test === child;
+        }
+        child = parent;
+    }
+    return false;
+}
+//# sourceMappingURL=rule.js.map

package/lib/S6351/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S6351/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAaoB;AACpB,4CAAiE;AACjE,4DAAoC;AAIvB,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,MAAM,EAAE;YACN;gBACE,0DAA0D;gBAC1D,IAAI,EAAE,CAAC,uBAAa,CAAC;aACtB;SACF;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2C,CAAC;QACvE,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,OAAO;YACL,cAAc,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACpC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,qBAAqB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAA6B,CAAC;gBAC/C,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5B,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBAChE,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,uBAAuB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC7C,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,oBAAoB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC1C,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,cAAc,EAAE,GAAG,EAAE;gBACnB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjE,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACpC,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CACzD,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,IAAiB,EAAE,GAAgB;IACvD,IAAI,IAAA,wBAAc,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,IAAA,2BAAmB,EAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAA,gBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA+B,EAC/B,OAAoB,EACpB,WAAyD,EACzD,OAAyB;IAEzB,IACE,IAAA,yBAAe,EAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC;QAC5C,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAC5C,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAA,6BAAmB,EAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAA,6BAAmB,EAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YAClD,IAAI,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAiB,EACjB,OAAoB,EACpB,MAA2B,EAC3B,OAAyB;IAEzB,sCAAsC;IACtC,IACE,IAAA,uBAAa,EAAC,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;QACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,EAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,IAAI,KAAK,sBAAsB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,IAAA,6BAAmB,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,IAAA,6BAAmB,EAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAClD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA+B,EAAE,OAAyB;IAC1F,qDAAqD;IACrD,IAAI,IAAA,sBAAY,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,IAAA,wBAAc,EAAC,MAAM,CAAC,IAAI,IAAA,2BAAmB,EAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC;YAChF,IAAI,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtE,IAAA,gBAAM,EAAC,OAAO,EAAE;oBACd,OAAO,EAAE,yDAAyD;oBAClE,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAgB,EAAE,OAAyB;IACzE,mCAAmC;IACnC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,IAAA,gBAAM,EAAC,OAAO,EAAE;YACd,OAAO,EAAE,wEAAwE;YACjF,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAqB,EACrB,MAA+B,EAC/B,MAA2B,EAC3B,OAAyB;IAEzB,iEAAiE;IACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1E,CAAC;QACF,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,UAAU,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAyB,CAAC;YAC1D,IAAA,gBAAM,EACJ,OAAO,EACP;gBACE,OAAO,EAAE,wEAAwE;gBACjF,IAAI,EAAE,OAAO;aACd,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAA,6BAAmB,EAAC,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAiB,EAAE,OAAyB;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAA+B,CAAC;IACpC,IAAI,KAAK,GAAgB,IAAI,CAAC;IAC9B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QAChD,IAAI,sBAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM;QACR,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;QAC/B,CAAC;QACD,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/S6353/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S6353/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S6353/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S6353/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S6353/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "suggestion",
+    "docs": {
+        "description": "Regular expression quantifiers and character classes should be used concisely",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S6353/javascript",
+        "requiresTypeChecking": true
+    }
+}

package/lib/S6353/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;