eslint-plugin-sonarjs 4.0.0 → 4.0.2

package/cjs/S1854/rule.js

@@ -51,10 +51,14 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const lva_js_1 = require("../helpers/lva.js");
+const ancestor_js_1 = require("../helpers/ancestor.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const ast_js_1 = require("../helpers/ast.js");
+const collection_js_1 = require("../helpers/collection.js");
 const meta = __importStar(require("./generated-meta.js"));
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             removeAssignment: 'Remove this useless assignment to variable "{{variable}}".',
         },
@@ -92,14 +96,14 @@ exports.rule = {
                 destructuringStack.push(new DestructuringContext());
             },
             'ObjectPattern > Property > Identifier': (node) => {
-                const destructuring = (0, index_js_1.last)(destructuringStack);
+                const destructuring = (0, collection_js_1.last)(destructuringStack);
                 const { ref } = resolveReference(node);
                 if (ref) {
                     destructuring.references.push(ref);
                 }
             },
             'ObjectPattern > :matches(RestElement, ExperimentalRestProperty)': () => {
-                (0, index_js_1.last)(destructuringStack).hasRest = true;
+                (0, collection_js_1.last)(destructuringStack).hasRest = true;
             },
             'ObjectPattern:exit': () => {
                 const destructuring = destructuringStack.pop();
@@ -114,7 +118,7 @@ exports.rule = {
                 collectVariablesReadInCatchOrFinally(tryStmt, context);
             },
             'Program:exit': () => {
-                (0, index_js_1.lva)(liveVariablesMap);
+                (0, lva_js_1.lva)(liveVariablesMap);
                 for (const lva of liveVariablesMap.values()) {
                     checkSegment(lva);
                     reportNeverReadVariables(lva);
@@ -122,7 +126,7 @@ exports.rule = {
             },
             // CodePath events
             onCodePathSegmentStart: (segment) => {
-                liveVariablesMap.set(segment.id, new index_js_1.LiveVariables(segment));
+                liveVariablesMap.set(segment.id, new lva_js_1.LiveVariables(segment));
                 currentCodePathSegments.push(segment);
             },
             onCodePathStart: codePath => {
@@ -139,10 +143,10 @@ exports.rule = {
             },
         };
         function pushAssignmentContext(node) {
-            (0, index_js_1.last)(codePathStack).assignmentStack.push(new AssignmentContext(node));
+            (0, collection_js_1.last)(codePathStack).assignmentStack.push(new AssignmentContext(node));
         }
         function popAssignmentContext() {
-            const assignment = (0, index_js_1.last)(codePathStack).assignmentStack.pop();
+            const assignment = (0, collection_js_1.last)(codePathStack).assignmentStack.pop();
             for (const r of assignment.rhs) {
                 processReference(r);
             }
@@ -201,7 +205,7 @@ exports.rule = {
         }
         function isNullAssignment(ref) {
             const parent = ref.identifier.parent;
-            return parent?.type === 'AssignmentExpression' && (0, index_js_1.isNullLiteral)(parent.right);
+            return parent?.type === 'AssignmentExpression' && (0, ast_js_1.isNullLiteral)(parent.right);
         }
         function isEnumConstant(node) {
             return context.sourceCode.getAncestors(node).some(n => n.type === 'TSEnumDeclaration');
@@ -254,9 +258,9 @@ exports.rule = {
             return { ref: jsxReference, variable: jsxReference.resolved };
         }
         function processReference(ref) {
-            const assignmentStack = (0, index_js_1.last)(codePathStack).assignmentStack;
+            const assignmentStack = (0, collection_js_1.last)(codePathStack).assignmentStack;
             if (assignmentStack.length > 0) {
-                const assignment = (0, index_js_1.last)(assignmentStack);
+                const assignment = (0, collection_js_1.last)(assignmentStack);
                 assignment.add(ref);
             }
             else {
@@ -271,7 +275,7 @@ exports.rule = {
                 lva = liveVariablesMap.get(segment.id);
             }
             else {
-                lva = new index_js_1.LiveVariables(segment);
+                lva = new lva_js_1.LiveVariables(segment);
                 liveVariablesMap.set(segment.id, lva);
             }
             return lva;
@@ -283,7 +287,7 @@ exports.rule = {
             }
         }
         function updateVariableUsages(variable) {
-            const codePathId = (0, index_js_1.last)(codePathStack).codePath.id;
+            const codePathId = (0, collection_js_1.last)(codePathStack).codePath.id;
             if (variableUsages.has(variable)) {
                 variableUsages.get(variable).add(codePathId);
             }
@@ -352,7 +356,7 @@ exports.rule = {
                 callback(node);
                 return;
             }
-            for (const child of (0, index_js_1.childrenOf)(node, context.sourceCode.visitorKeys)) {
+            for (const child of (0, ancestor_js_1.childrenOf)(node, context.sourceCode.visitorKeys)) {
                 visitIdentifiers(child, callback, visited);
             }
         }

package/cjs/S1862/rule.js

@@ -51,12 +51,14 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const equivalence_js_1 = require("../helpers/equivalence.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const location_js_1 = require("../helpers/location.js");
 const meta = __importStar(require("./generated-meta.js"));
 const duplicatedConditionMessage = 'This condition is covered by the one on line {{line}}';
 const duplicatedCaseMessage = 'This case duplicates the one on line {{line}}';
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             duplicatedCondition: duplicatedConditionMessage,
             duplicatedCase: duplicatedCaseMessage,
@@ -77,12 +79,12 @@ exports.rule = {
                     const currentOrOperands = splitByOr(current.test).map(splitByAnd);
                     operandsToCheck = operandsToCheck.map(orOperands => orOperands.filter(orOperand => !currentOrOperands.some(currentOrOperand => isSubset(currentOrOperand, orOperand, sourceCode))));
                     if (operandsToCheck.some(orOperands => orOperands.length === 0)) {
-                        (0, index_js_1.report)(context, {
+                        (0, location_js_1.report)(context, {
                             message: duplicatedConditionMessage,
                             messageId: 'duplicatedCondition',
                             data: { line: current.test.loc.start.line },
                             node: test,
-                        }, [(0, index_js_1.toSecondaryLocation)({ loc: current.test.loc }, 'Covering')]);
+                        }, [(0, location_js_1.toSecondaryLocation)({ loc: current.test.loc }, 'Covering')]);
                         break;
                     }
                 }
@@ -92,16 +94,16 @@ exports.rule = {
                 for (const switchCase of switchStmt.cases) {
                     if (switchCase.test) {
                         const { test } = switchCase;
-                        const duplicateTest = previousTests.find(previousTest => (0, index_js_1.areEquivalent)(test, previousTest, sourceCode));
+                        const duplicateTest = previousTests.find(previousTest => (0, equivalence_js_1.areEquivalent)(test, previousTest, sourceCode));
                         if (duplicateTest) {
-                            (0, index_js_1.report)(context, {
+                            (0, location_js_1.report)(context, {
                                 messageId: 'duplicatedCase',
                                 message: duplicatedCaseMessage,
                                 data: {
                                     line: duplicateTest.loc.start.line,
                                 },
                                 node: test,
-                            }, [(0, index_js_1.toSecondaryLocation)({ loc: duplicateTest.loc }, 'Original')]);
+                            }, [(0, location_js_1.toSecondaryLocation)({ loc: duplicateTest.loc }, 'Original')]);
                         }
                         else {
                             previousTests.push(test);
@@ -139,6 +141,6 @@ function isSubset(first, second, sourceCode) {
                         isSubsetOf(first.right, second1.left, sourceCode)));
             }
         }
-        return (0, index_js_1.areEquivalent)(first, second, sourceCode);
+        return (0, equivalence_js_1.areEquivalent)(first, second, sourceCode);
     }
 }

package/cjs/S1871/rule.js

@@ -51,11 +51,16 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const equivalence_js_1 = require("../helpers/equivalence.js");
+const conditions_js_1 = require("../helpers/conditions.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const ast_js_1 = require("../helpers/ast.js");
+const collection_js_1 = require("../helpers/collection.js");
+const location_js_1 = require("../helpers/location.js");
 const meta = __importStar(require("./generated-meta.js"));
 const message = "This {{type}}'s code block is the same as the block for the {{type}} on line {{line}}.";
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             sameConditionalBlock: message,
         },
@@ -70,10 +75,10 @@ exports.rule = {
             },
         };
         function visitIfStatement(ifStmt) {
-            if ((0, index_js_1.isIfStatement)(ifStmt.parent)) {
+            if ((0, ast_js_1.isIfStatement)(ifStmt.parent)) {
                 return;
             }
-            const { branches, endsWithElse } = (0, index_js_1.collectIfBranches)(ifStmt);
+            const { branches, endsWithElse } = (0, conditions_js_1.collectIfBranches)(ifStmt);
             if (allEquivalentWithoutDefault(branches, endsWithElse)) {
                 for (const [i, branch] of branches.slice(1).entries()) {
                     reportIssue(branch, branches[i], 'branch');
@@ -92,9 +97,9 @@ exports.rule = {
         }
         function visitSwitchStatement(switchStmt) {
             const { cases } = switchStmt;
-            const { endsWithDefault } = (0, index_js_1.collectSwitchBranches)(switchStmt);
-            const nonEmptyCases = cases.filter(c => (0, index_js_1.takeWithoutBreak)(expandSingleBlockStatement(c.consequent)).length > 0);
-            const casesWithoutBreak = nonEmptyCases.map(c => (0, index_js_1.takeWithoutBreak)(expandSingleBlockStatement(c.consequent)));
+            const { endsWithDefault } = (0, conditions_js_1.collectSwitchBranches)(switchStmt);
+            const nonEmptyCases = cases.filter(c => (0, conditions_js_1.takeWithoutBreak)(expandSingleBlockStatement(c.consequent)).length > 0);
+            const casesWithoutBreak = nonEmptyCases.map(c => (0, conditions_js_1.takeWithoutBreak)(expandSingleBlockStatement(c.consequent)));
             if (allEquivalentWithoutDefault(casesWithoutBreak, endsWithDefault)) {
                 for (const [i, caseStmt] of nonEmptyCases.slice(1).entries()) {
                     reportIssue(caseStmt, nonEmptyCases[i], 'case');
@@ -102,11 +107,11 @@ exports.rule = {
                 return;
             }
             for (let i = 1; i < cases.length; i++) {
-                const firstClauseWithoutBreak = (0, index_js_1.takeWithoutBreak)(expandSingleBlockStatement(cases[i].consequent));
+                const firstClauseWithoutBreak = (0, conditions_js_1.takeWithoutBreak)(expandSingleBlockStatement(cases[i].consequent));
                 if (hasRequiredSize(firstClauseWithoutBreak)) {
                     for (let j = 0; j < i; j++) {
-                        const secondClauseWithoutBreak = (0, index_js_1.takeWithoutBreak)(expandSingleBlockStatement(cases[j].consequent));
-                        if ((0, index_js_1.areEquivalent)(firstClauseWithoutBreak, secondClauseWithoutBreak, context.sourceCode)) {
+                        const secondClauseWithoutBreak = (0, conditions_js_1.takeWithoutBreak)(expandSingleBlockStatement(cases[j].consequent));
+                        if ((0, equivalence_js_1.areEquivalent)(firstClauseWithoutBreak, secondClauseWithoutBreak, context.sourceCode)) {
                             reportIssue(cases[i], cases[j], 'case');
                             break;
                         }
@@ -118,14 +123,14 @@ exports.rule = {
             if (nodes.length > 0) {
                 const tokens = [
                     ...context.sourceCode.getTokens(nodes[0]),
-                    ...context.sourceCode.getTokens((0, index_js_1.last)(nodes)),
+                    ...context.sourceCode.getTokens((0, collection_js_1.last)(nodes)),
                 ].filter(token => token.value !== '{' && token.value !== '}');
-                return tokens.length > 0 && (0, index_js_1.last)(tokens).loc.end.line > tokens[0].loc.start.line;
+                return tokens.length > 0 && (0, collection_js_1.last)(tokens).loc.end.line > tokens[0].loc.start.line;
             }
             return false;
         }
         function compareIfBranches(a, b) {
-            const equivalent = (0, index_js_1.areEquivalent)(a, b, context.sourceCode);
+            const equivalent = (0, equivalence_js_1.areEquivalent)(a, b, context.sourceCode);
             if (equivalent && b.loc) {
                 reportIssue(a, b, 'branch');
             }
@@ -136,16 +141,16 @@ exports.rule = {
                 branches.length > 1 &&
                 branches
                     .slice(1)
-                    .every((branch, index) => (0, index_js_1.areEquivalent)(branch, branches[index], context.sourceCode)));
+                    .every((branch, index) => (0, equivalence_js_1.areEquivalent)(branch, branches[index], context.sourceCode)));
         }
         function reportIssue(node, equivalentNode, type) {
             const equivalentNodeLoc = equivalentNode.loc;
-            (0, index_js_1.report)(context, {
+            (0, location_js_1.report)(context, {
                 message,
                 messageId: 'sameConditionalBlock',
                 data: { type, line: String(equivalentNodeLoc.start.line) },
                 node,
-            }, [(0, index_js_1.toSecondaryLocation)(equivalentNode, 'Original')]);
+            }, [(0, location_js_1.toSecondaryLocation)(equivalentNode, 'Original')]);
         }
     },
 };

package/cjs/S1874/rule.js

@@ -51,17 +51,18 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const parser_services_js_1 = require("../helpers/parser-services.js");
 const meta = __importStar(require("./generated-meta.js"));
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             deprecation: '{{deprecation}}',
         },
     }),
     create(context) {
         const services = context.sourceCode.parserServices;
-        if (!(0, index_js_1.isRequiredParserServices)(services)) {
+        if (!(0, parser_services_js_1.isRequiredParserServices)(services)) {
             return {};
         }
         return {

package/cjs/S1940/rule.js

@@ -51,7 +51,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
 const meta = __importStar(require("./generated-meta.js"));
 const invertedOperators = {
     '==': '!=',
@@ -64,7 +64,7 @@ const invertedOperators = {
     '<=': '>',
 };
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             useOppositeOperator: 'Use the opposite operator ({{invertedOperator}}) instead.',
             suggestOperationInversion: 'Invert inner operation (apply if NaN is not expected)',

package/cjs/S1994/rule.js

@@ -51,7 +51,10 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const equivalence_js_1 = require("../helpers/equivalence.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const ancestor_js_1 = require("../helpers/ancestor.js");
+const collection_js_1 = require("../helpers/collection.js");
 const meta = __importStar(require("./generated-meta.js"));
 class ForInfo {
     constructor(forLoop) {
@@ -61,7 +64,7 @@ class ForInfo {
     }
 }
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             misplacedCounter: `This loop's stop condition tests "{{test}}" but the incrementer updates "{{update}}".`,
         },
@@ -90,7 +93,7 @@ exports.rule = {
             return false;
         }
         function peekFor() {
-            return (0, index_js_1.last)(forLoopStack);
+            return (0, collection_js_1.last)(forLoopStack);
         }
         return {
             ForStatement: (node) => {
@@ -101,7 +104,7 @@ exports.rule = {
                 if (forInfo.updatedExpressions.length === 0 || !forInfo.forLoop.test) {
                     return;
                 }
-                const hasIntersection = forInfo.testedExpressions.some(testedExpr => forInfo.updatedExpressions.some(updatedExpr => (0, index_js_1.areEquivalent)(updatedExpr, testedExpr, context.sourceCode)));
+                const hasIntersection = forInfo.testedExpressions.some(testedExpr => forInfo.updatedExpressions.some(updatedExpr => (0, equivalence_js_1.areEquivalent)(updatedExpr, testedExpr, context.sourceCode)));
                 if (!hasIntersection) {
                     context.report({
                         loc: context.sourceCode.getFirstToken(forInfo.forLoop).loc,
@@ -140,7 +143,7 @@ exports.rule = {
             },
             'ForStatement Identifier': (node) => {
                 if (isInsideTest(node)) {
-                    const parent = (0, index_js_1.getParent)(context, node);
+                    const parent = (0, ancestor_js_1.getParent)(context, node);
                     if (parent.type !== 'MemberExpression' || parent.computed || parent.object === node) {
                         peekFor().testedExpressions.push(node);
                     }
@@ -148,8 +151,8 @@ exports.rule = {
             },
             'ForStatement MemberExpression': (node) => {
                 if (isInsideTest(node) &&
-                    (0, index_js_1.getParent)(context, node).type !== 'MemberExpression' &&
-                    (0, index_js_1.getParent)(context, node).type !== 'CallExpression') {
+                    (0, ancestor_js_1.getParent)(context, node).type !== 'MemberExpression' &&
+                    (0, ancestor_js_1.getParent)(context, node).type !== 'CallExpression') {
                     peekFor().testedExpressions.push(node);
                 }
             },

package/cjs/S2004/rule.js

@@ -51,7 +51,9 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const location_js_1 = require("../helpers/location.js");
+const test_frameworks_js_1 = require("../helpers/test-frameworks.js");
 const meta = __importStar(require("./generated-meta.js"));
 const DEFAULT_THRESHOLD = 4;
 /**
@@ -63,10 +65,10 @@ function isTestFrameworkCallback(node) {
     if (parent?.type !== 'CallExpression') {
         return false;
     }
-    return (0, index_js_1.isTestFrameworkCall)(parent);
+    return (0, test_frameworks_js_1.isTestFrameworkCall)(parent);
 }
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta),
+    meta: (0, generate_meta_js_1.generateMeta)(meta),
     create(context) {
         const max = context.options[0]?.threshold ?? DEFAULT_THRESHOLD;
         const nestedStack = [];
@@ -80,11 +82,11 @@ exports.rule = {
                 nestedStack.push(fn);
                 if (nestedStack.length === max + 1) {
                     const secondaries = nestedStack.slice(0, -1);
-                    (0, index_js_1.report)(context, {
-                        loc: (0, index_js_1.getMainFunctionTokenLocation)(fn, fn.parent, context),
+                    (0, location_js_1.report)(context, {
+                        loc: (0, location_js_1.getMainFunctionTokenLocation)(fn, fn.parent, context),
                         message: `Refactor this code to not nest functions more than ${max} levels deep.`,
-                    }, secondaries.map(n => (0, index_js_1.toSecondaryLocation)({
-                        loc: (0, index_js_1.getMainFunctionTokenLocation)(n, n.parent, context),
+                    }, secondaries.map(n => (0, location_js_1.toSecondaryLocation)({
+                        loc: (0, location_js_1.getMainFunctionTokenLocation)(n, n.parent, context),
                     }, 'Nesting +1')));
                 }
             },

package/cjs/S2068/rule.js

@@ -54,17 +54,27 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const ast_js_1 = require("../helpers/ast.js");
+const entropy_js_1 = require("../helpers/entropy.js");
 const node_path_1 = __importDefault(require("node:path"));
 const meta = __importStar(require("./generated-meta.js"));
 const DEFAULT_NAMES = ['password', 'pwd', 'passwd', 'passphrase'];
+const ENTROPY_THRESHOLD = 3;
+const MIN_PASSWORD_LENGTH = 5;
+const NON_CREDENTIAL_CHARS = /[\s/["'\]<>]/;
+const TEST_FILE_PATTERN = /\.(spec|test|mock)\.[jt]sx?$/;
 const messages = {
     reviewPassword: 'Review this potentially hard-coded password.',
 };
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, { messages }),
+    meta: (0, generate_meta_js_1.generateMeta)(meta, { messages }),
     create(context) {
-        const dir = node_path_1.default.dirname(context.physicalFilename);
+        const filename = context.physicalFilename;
+        if (TEST_FILE_PATTERN.test(filename)) {
+            return {};
+        }
+        const dir = node_path_1.default.dirname(filename);
         const parts = dir.split(node_path_1.default.sep).map(part => part.toLowerCase());
         if (parts.includes('l10n')) {
             return {};
@@ -98,21 +108,74 @@ exports.rule = {
 };
 function checkAssignment(context, patterns, variable, initializer) {
     if (initializer &&
-        (0, index_js_1.isStringLiteral)(initializer) &&
-        initializer.value.length > 0 &&
-        patterns.some(pattern => context.sourceCode.getText(variable).toLowerCase().includes(pattern))) {
+        patterns.some(pattern => context.sourceCode.getText(variable).toLowerCase().includes(pattern)) &&
+        findValueSuspect(initializer)) {
         context.report({
             messageId: 'reviewPassword',
             node: initializer,
         });
     }
 }
+function findValueSuspect(node) {
+    if (!node) {
+        return false;
+    }
+    if ((0, ast_js_1.isStringLiteral)(node)) {
+        const value = node.value;
+        return (value.length >= MIN_PASSWORD_LENGTH &&
+            !NON_CREDENTIAL_CHARS.test(value) &&
+            hasHighEntropy(value));
+    }
+    if (node.type === 'ConditionalExpression') {
+        return findValueSuspect(node.consequent) || findValueSuspect(node.alternate);
+    }
+    if ((0, ast_js_1.isLogicalExpression)(node) &&
+        ['??', '||'].includes(node.operator)) {
+        return findValueSuspect(node.right);
+    }
+    return false;
+}
 function checkLiteral(context, patterns, literal) {
-    if ((0, index_js_1.isStringLiteral)(literal) &&
-        patterns.some(pattern => pattern.test(literal.value.toLowerCase()))) {
-        context.report({
-            messageId: 'reviewPassword',
-            node: literal,
-        });
+    if (!(0, ast_js_1.isStringLiteral)(literal)) {
+        return;
     }
+    const value = literal.value;
+    const lowerValue = value.toLowerCase();
+    for (const pattern of patterns) {
+        const match = pattern.exec(lowerValue);
+        if (!match) {
+            continue;
+        }
+        const eqIndex = value.indexOf('=', match.index);
+        if (eqIndex === -1) {
+            continue;
+        }
+        const passwordValue = extractPasswordValue(value, eqIndex);
+        if (passwordValue.length >= MIN_PASSWORD_LENGTH && hasHighEntropy(passwordValue)) {
+            context.report({
+                messageId: 'reviewPassword',
+                node: literal,
+            });
+            return;
+        }
+    }
+}
+function extractPasswordValue(value, eqIndex) {
+    const passwordPart = value.substring(eqIndex + 1);
+    const nextSep = findNextSeparator(passwordPart);
+    return nextSep === -1 ? passwordPart : passwordPart.substring(0, nextSep);
+}
+function findNextSeparator(str) {
+    const separators = ['&', ' ', ';'];
+    let minIndex = -1;
+    for (const sep of separators) {
+        const idx = str.indexOf(sep);
+        if (idx !== -1 && (minIndex === -1 || idx < minIndex)) {
+            minIndex = idx;
+        }
+    }
+    return minIndex;
+}
+function hasHighEntropy(value) {
+    return (0, entropy_js_1.shannonEntropy)(value) > ENTROPY_THRESHOLD;
 }

package/cjs/S2077/generated-meta.js

@@ -39,7 +39,7 @@ exports.meta = {
         description: 'Formatting SQL queries is security-sensitive',
         recommended: true,
         url: 'https://sonarsource.github.io/rspec/#/rspec/S2077/javascript',
-        requiresTypeChecking: false,
+        requiresTypeChecking: true,
     },
     fixable: undefined,
     deprecated: false,

package/cjs/S2077/rule.js

@@ -51,7 +51,11 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const module_js_1 = require("../helpers/module.js");
+const module_ts_js_1 = require("../helpers/module-ts.js");
+const ast_js_1 = require("../helpers/ast.js");
+const parser_services_js_1 = require("../helpers/parser-services.js");
 const meta = __importStar(require("./generated-meta.js"));
 const sqlQuerySignatures = new Set([
     'pg.Client.query',
@@ -72,23 +76,23 @@ const sqlQuerySignatures = new Set([
     'better-sqlite3.prepare',
 ]);
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             safeQuery: `Make sure that executing SQL queries is safe here.`,
         },
     }),
     create(context) {
         const services = context.sourceCode.parserServices;
-        const hasTypeInformation = (0, index_js_1.isRequiredParserServices)(services);
+        const hasTypeInformation = (0, parser_services_js_1.isRequiredParserServices)(services);
         return {
             CallExpression(node) {
                 let fqn = null;
                 if (hasTypeInformation) {
                     const tsNode = services.esTreeNodeToTSNodeMap.get(node);
-                    fqn = (0, index_js_1.getFullyQualifiedNameTS)(services, tsNode);
+                    fqn = (0, module_ts_js_1.getFullyQualifiedNameTS)(services, tsNode);
                 }
                 else {
-                    fqn = (0, index_js_1.getFullyQualifiedName)(context, node.callee);
+                    fqn = (0, module_js_1.getFullyQualifiedName)(context, node.callee);
                 }
                 if (fqn && sqlQuerySignatures.has(fqn) && isQuestionable(node.arguments[0])) {
                     context.report({
@@ -110,7 +114,7 @@ function isQuestionable(sqlQuery) {
     if (isConcatenation(sqlQuery)) {
         return isVariableConcat(sqlQuery);
     }
-    return (sqlQuery.type === 'CallExpression' && (0, index_js_1.isMemberWithProperty)(sqlQuery.callee, 'concat', 'replace'));
+    return (sqlQuery.type === 'CallExpression' && (0, ast_js_1.isMemberWithProperty)(sqlQuery.callee, 'concat', 'replace'));
 }
 function isVariableConcat(node) {
     const { left, right } = node;

package/cjs/S2092/rule.js

@@ -52,10 +52,10 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 const cookie_flag_check_js_1 = require("../helpers/cookie-flag-check.js");
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
 const meta = __importStar(require("./generated-meta.js"));
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta),
+    meta: (0, generate_meta_js_1.generateMeta)(meta),
     create(context) {
         return {
             CallExpression: (node) => new cookie_flag_check_js_1.CookieFlagCheck(context, 'secure').checkCookiesFromCallExpression(node),

package/cjs/S2123/rule.js

@@ -51,10 +51,10 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
 const meta = __importStar(require("./generated-meta.js"));
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             removeIncrement: 'Remove this {{updateOperator}}rement or correct the code not to waste it.',
         },

package/cjs/S2137/rule.js

@@ -55,7 +55,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 const globals_1 = __importDefault(require("globals"));
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
 const meta = __importStar(require("./generated-meta.js"));
 const illegalNames = new Set(['arguments']);
 const objectPrototypeProperties = new Set([
@@ -77,7 +77,7 @@ const getModificationIssue = (functionName) => ({
     data: { symbol: functionName },
 });
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             removeModification: 'Remove the modification of "{{symbol}}".',
             forbidDeclaration: 'Do not use "{{symbol}}" to declare a {{type}} - use another name.',

package/cjs/S2138/rule.js

@@ -51,17 +51,18 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
-const index_js_1 = require("../helpers/index.js");
+const generate_meta_js_1 = require("../helpers/generate-meta.js");
+const ast_js_1 = require("../helpers/ast.js");
 const meta = __importStar(require("./generated-meta.js"));
 exports.rule = {
-    meta: (0, index_js_1.generateMeta)(meta, {
+    meta: (0, generate_meta_js_1.generateMeta)(meta, {
         messages: {
             useNull: 'Use null instead.',
         },
     }),
     create(context) {
         function raiseOnUndefined(node) {
-            if ((0, index_js_1.isUndefined)(node)) {
+            if ((0, ast_js_1.isUndefined)(node)) {
                 context.report({
                     messageId: 'useNull',
                     node,