eslint-plugin-sonarjs 4.0.2 → 4.1.0

package/cjs/S4790/rule.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -53,6 +53,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 const generate_meta_js_1 = require("../helpers/generate-meta.js");
 const module_js_1 = require("../helpers/module.js");
+const ancestor_js_1 = require("../helpers/ancestor.js");
 const ast_js_1 = require("../helpers/ast.js");
 const meta = __importStar(require("./generated-meta.js"));
 const message = 'Make sure this weak hash algorithm is not used in a sensitive context here.';
@@ -71,20 +72,21 @@ const CRYPTO_UNSECURE_HASH_ALGORITHMS = new Set([
     'sha1',
 ]);
 const SUBTLE_UNSECURE_HASH_ALGORITHMS = new Set(['sha-1']);
+const TRUNCATION_METHODS = new Set(['slice', 'substring']);
 exports.rule = {
     meta: (0, generate_meta_js_1.generateMeta)(meta),
     create(context) {
         function checkNodejsCrypto(fqn, node) {
             // crypto#createHash
             const { callee, arguments: args } = node;
-            if (fqn === 'crypto.createHash') {
+            if (fqn === 'crypto.createHash' && !isDigestTruncated(context, node)) {
                 checkUnsecureAlgorithm(callee, args[0], CRYPTO_UNSECURE_HASH_ALGORITHMS);
             }
         }
         function checkSubtleCrypto(fqn, node) {
             // crypto.subtle#digest
             const { callee, arguments: args } = node;
-            if (fqn === 'crypto.subtle.digest') {
+            if (fqn === 'crypto.subtle.digest' && !isSubtleDigestTruncated(context, node)) {
                 checkUnsecureAlgorithm(callee, args[0], SUBTLE_UNSECURE_HASH_ALGORITHMS);
             }
         }
@@ -108,3 +110,216 @@ exports.rule = {
         };
     },
 };
+// A truncated digest cannot serve password storage, signing, or integrity checks — those all need the
+// full output — so the use is non-cryptographic (short identifier, cache key, ETag).
+function isDigestTruncated(context, createHashCall) {
+    let node = createHashCall;
+    let digestCall = null;
+    while (true) {
+        const parent = (0, ancestor_js_1.getNodeParent)(node);
+        if (parent?.type !== 'MemberExpression' || parent.object !== node) {
+            break;
+        }
+        const grandParent = (0, ancestor_js_1.getNodeParent)(parent);
+        if (grandParent?.type !== 'CallExpression' || grandParent.callee !== parent) {
+            break;
+        }
+        const methodName = parent.property.type === 'Identifier' ? parent.property.name : null;
+        if (digestCall && isTruncationCall(context, grandParent)) {
+            return true;
+        }
+        if (methodName === 'digest') {
+            digestCall = grandParent;
+        }
+        node = grandParent;
+    }
+    return digestCall !== null && isBoundToTruncatedReference(context, digestCall);
+}
+// Only suppress when every read of the bound digest is truncated — otherwise a mixed-use binding
+// (one full + one sliced) would silently silence the sensitive use. Write refs are skipped: the
+// declarator init is itself a write and reassignments don't consume the value.
+function isBoundToTruncatedReference(context, initNode) {
+    const declarator = (0, ancestor_js_1.getNodeParent)(initNode);
+    if (declarator?.type !== 'VariableDeclarator' ||
+        declarator.init !== initNode ||
+        declarator.id.type !== 'Identifier') {
+        return false;
+    }
+    const variable = (0, ast_js_1.getVariableFromName)(context, declarator.id.name, declarator.id);
+    return !!variable && hasOnlyTruncatedReads(context, variable);
+}
+function hasOnlyTruncatedReads(context, variable) {
+    const reads = variable.references.filter(ref => ref.isRead());
+    return reads.length > 0 && reads.every(ref => isIdentifierTruncated(context, ref.identifier));
+}
+// crypto.subtle.digest(...) returns Promise<ArrayBuffer>. Truncation can happen via .then callback,
+// after await on a binding, or immediately on the awaited value.
+function isSubtleDigestTruncated(context, digestCall) {
+    if (isPromiseThenTruncated(context, digestCall)) {
+        return true;
+    }
+    const parent = (0, ancestor_js_1.getNodeParent)(digestCall);
+    const valueNode = parent?.type === 'AwaitExpression' ? parent : digestCall;
+    return (isIdentifierTruncated(context, valueNode) || isBoundToTruncatedReference(context, valueNode));
+}
+function isPromiseThenTruncated(context, digestCall) {
+    const member = (0, ancestor_js_1.getNodeParent)(digestCall);
+    if (member?.type !== 'MemberExpression' ||
+        member.object !== digestCall ||
+        member.property.type !== 'Identifier' ||
+        member.property.name !== 'then') {
+        return false;
+    }
+    const thenCall = (0, ancestor_js_1.getNodeParent)(member);
+    if (thenCall?.type !== 'CallExpression' ||
+        thenCall.callee !== member ||
+        thenCall.arguments.length === 0) {
+        return false;
+    }
+    const callback = thenCall.arguments[0];
+    if ((callback.type !== 'ArrowFunctionExpression' && callback.type !== 'FunctionExpression') ||
+        callback.params.length === 0 ||
+        callback.params[0].type !== 'Identifier') {
+        return false;
+    }
+    const param = callback.params[0];
+    const variable = (0, ast_js_1.getVariableFromName)(context, param.name, param);
+    return !!variable && hasOnlyTruncatedReads(context, variable);
+}
+function isIdentifierTruncated(context, identifier) {
+    const parent = (0, ancestor_js_1.getNodeParent)(identifier);
+    if (parent?.type !== 'MemberExpression' || parent.object !== identifier) {
+        return false;
+    }
+    const grandParent = (0, ancestor_js_1.getNodeParent)(parent);
+    return (grandParent?.type === 'CallExpression' &&
+        grandParent.callee === parent &&
+        isTruncationCall(context, grandParent));
+}
+const UNKNOWN_VALUE = Symbol('unknown');
+// Treat `slice` / `substring` as truncation unless the argument pattern obviously preserves the
+// whole output. This keeps named constants and unresolved bounds in scope while excluding simple
+// no-op forms like `.slice()`, `.slice(0, undefined)`, or `.substring('foo')`. Other shortening
+// helpers (`substr`, `at`, `charAt`, `subarray`, transform-based extraction, etc.) are
+// intentionally left out here to keep this PR scoped to the existing `slice` / `substring` idiom.
+function isTruncationCall(context, call) {
+    if (call.callee.type !== 'MemberExpression' || call.callee.property.type !== 'Identifier') {
+        return false;
+    }
+    const method = call.callee.property.name;
+    if (!TRUNCATION_METHODS.has(method)) {
+        return false;
+    }
+    return !isObviouslyFullOutput(context, method, call.arguments);
+}
+function isObviouslyFullOutput(context, method, args) {
+    if (args.length === 0) {
+        return true;
+    }
+    if (method === 'slice') {
+        return isSliceFullOutput(context, args);
+    }
+    return isSubstringFullOutput(context, args);
+}
+function isSliceFullOutput(context, args) {
+    if (!isSliceNoOpStart(resolveStaticValue(context, args[0]))) {
+        return false;
+    }
+    return args.length === 1 || isSliceFullOutputEnd(resolveStaticValue(context, args[1]));
+}
+function isSubstringFullOutput(context, args) {
+    const startKind = getSubstringStartKind(resolveStaticValue(context, args[0]));
+    if (args.length === 1) {
+        return startKind === 'zero';
+    }
+    const endKind = getSubstringEndKind(resolveStaticValue(context, args[1]));
+    return ((startKind === 'zero' && endKind === 'length') || (startKind === 'length' && endKind === 'zero'));
+}
+function isSliceNoOpStart(value) {
+    return value === undefined || (typeof value === 'number' && (value === 0 || Number.isNaN(value)));
+}
+function isSliceFullOutputEnd(value) {
+    return value === undefined || value === Infinity;
+}
+function getSubstringStartKind(value) {
+    if (value === undefined) {
+        return 'zero';
+    }
+    if (typeof value === 'number') {
+        if (value === Infinity) {
+            return 'length';
+        }
+        if (value <= 0 || Number.isNaN(value)) {
+            return 'zero';
+        }
+    }
+    return 'other';
+}
+function getSubstringEndKind(value) {
+    if (value === undefined) {
+        return 'length';
+    }
+    if (typeof value === 'number') {
+        if (value === Infinity) {
+            return 'length';
+        }
+        if (value <= 0 || Number.isNaN(value)) {
+            return 'zero';
+        }
+    }
+    return 'other';
+}
+function resolveStaticValue(context, node) {
+    if (node.type === 'SpreadElement') {
+        return UNKNOWN_VALUE;
+    }
+    return getStaticValue((0, ast_js_1.getUniqueWriteUsageOrNode)(context, node, true));
+}
+function getStaticValue(node) {
+    if (node.type === 'Literal') {
+        return coerceLiteralValue(node.value);
+    }
+    if (node.type === 'Identifier') {
+        return getIdentifierStaticValue(node);
+    }
+    if (node.type === 'UnaryExpression' && (node.operator === '+' || node.operator === '-')) {
+        return getUnaryStaticValue(node);
+    }
+    return UNKNOWN_VALUE;
+}
+function getIdentifierStaticValue(node) {
+    switch (node.name) {
+        case 'undefined':
+            return undefined;
+        case 'Infinity':
+            return Infinity;
+        case 'NaN':
+            return Number.NaN;
+        default:
+            return UNKNOWN_VALUE;
+    }
+}
+function getUnaryStaticValue(node) {
+    const value = getStaticValue(node.argument);
+    if (value === UNKNOWN_VALUE) {
+        return UNKNOWN_VALUE;
+    }
+    if (value === undefined) {
+        return Number.NaN;
+    }
+    return node.operator === '+' ? value : -value;
+}
+function coerceLiteralValue(value) {
+    switch (typeof value) {
+        case 'number':
+            return value;
+        case 'string':
+        case 'boolean':
+        case 'bigint':
+            return Number(value);
+        case 'object':
+            return value === null ? 0 : UNKNOWN_VALUE;
+        default:
+            return UNKNOWN_VALUE;
+    }
+}

package/cjs/S4798/generated-meta.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -31,7 +31,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
+exports.skipOnGeneratedSource = exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
 __exportStar(require("./meta.js"), exports);
 exports.meta = {
     type: 'suggestion',
@@ -49,3 +49,4 @@ exports.sonarKey = 'S4798';
 exports.scope = 'Main';
 exports.languages = ['ts'];
 exports.requiredDependency = [];
+exports.skipOnGeneratedSource = false;

package/cjs/S4798/index.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4798/meta.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.eslintId = exports.implementation = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4798/rule.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4822/generated-meta.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -31,7 +31,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
+exports.requiredEcmaVersion = exports.skipOnGeneratedSource = exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
 __exportStar(require("./meta.js"), exports);
 exports.meta = {
     type: 'problem',
@@ -49,3 +49,5 @@ exports.sonarKey = 'S4822';
 exports.scope = 'Main';
 exports.languages = ['js', 'ts'];
 exports.requiredDependency = [];
+exports.skipOnGeneratedSource = false;
+exports.requiredEcmaVersion = 2017;

package/cjs/S4822/index.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4822/meta.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.hasSecondaries = exports.eslintId = exports.implementation = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4822/rule.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4830/generated-meta.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -31,7 +31,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
+exports.skipOnGeneratedSource = exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
 __exportStar(require("./meta.js"), exports);
 exports.meta = {
     type: 'problem',
@@ -49,3 +49,4 @@ exports.sonarKey = 'S4830';
 exports.scope = 'Main';
 exports.languages = ['js', 'ts'];
 exports.requiredDependency = [];
+exports.skipOnGeneratedSource = false;

package/cjs/S4830/index.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4830/meta.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.hasSecondaries = exports.eslintId = exports.implementation = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S4830/rule.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S5042/generated-meta.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -31,21 +31,22 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
+exports.skipOnGeneratedSource = exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
 __exportStar(require("./meta.js"), exports);
 exports.meta = {
-    type: 'problem',
+    type: 'suggestion',
     docs: {
-        description: 'Expanding archive files without controlling resource consumption is security-sensitive',
-        recommended: true,
+        description: 'Expanding archive files should not be done without controlling resource consumption',
+        recommended: false,
         url: 'https://sonarsource.github.io/rspec/#/rspec/S5042/javascript',
         requiresTypeChecking: false,
     },
     fixable: undefined,
-    deprecated: false,
+    deprecated: true,
     defaultOptions: [],
 };
 exports.sonarKey = 'S5042';
 exports.scope = 'Main';
 exports.languages = ['js', 'ts'];
 exports.requiredDependency = [];
+exports.skipOnGeneratedSource = false;

package/cjs/S5042/index.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S5042/meta.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.eslintId = exports.implementation = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S5042/rule.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of

package/cjs/S5122/generated-meta.js

@@ -1,11 +1,11 @@
 "use strict";
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -31,12 +31,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
+exports.skipOnGeneratedSource = exports.requiredDependency = exports.languages = exports.scope = exports.sonarKey = exports.meta = void 0;
 __exportStar(require("./meta.js"), exports);
 exports.meta = {
     type: 'problem',
     docs: {
-        description: 'Having a permissive Cross-Origin Resource Sharing policy is security-sensitive',
+        description: 'Cross-Origin Resource Sharing (CORS) policy should be restricted to trusted origins',
         recommended: true,
         url: 'https://sonarsource.github.io/rspec/#/rspec/S5122/javascript',
         requiresTypeChecking: false,
@@ -49,3 +49,4 @@ exports.sonarKey = 'S5122';
 exports.scope = 'Main';
 exports.languages = ['js', 'ts'];
 exports.requiredDependency = [];
+exports.skipOnGeneratedSource = false;

package/cjs/S5122/index.js

@@ -3,11 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.rule = void 0;
 /*
  * SonarQube JavaScript Plugin
- * Copyright (C) 2011-2025 SonarSource Sàrl
+ * Copyright (C) SonarSource Sàrl
  * mailto:info AT sonarsource DOT com
  *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the Sonar Source-Available License Version 1, as published by SonarSource SA.
+ * You can redistribute and/or modify this program under the terms of
+ * the Sonar Source-Available License Version 1, as published by SonarSource Sàrl.
  *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of