eslint-plugin-sonarjs 4.0.3 → 4.1.0

package/docs/async-test-assertions.md

@@ -0,0 +1,7 @@
+# sonarjs/async-test-assertions
+
+📝 Async test assertions should be awaited or returned.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/aws-apigateway-public-api.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-apigateway-public-api
 
-📝 Creating public APIs is security-sensitive.
+📝 AWS API Gateway should require authentication.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-ec2-rds-dms-public.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-ec2-rds-dms-public
 
-📝 Allowing public network access to cloud resources is security-sensitive.
+📝 Public network access to cloud resources should be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-efs-unencrypted.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-efs-unencrypted
 
-📝 Using unencrypted EFS file systems is security-sensitive.
+📝 Amazon EFS file systems should be encrypted.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-iam-all-resources-accessible.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-iam-all-resources-accessible
 
-📝 Policies granting access to all resources of an account are security-sensitive.
+📝 IAM policies should not grant access to all account resources.
 
 🚫 This rule is _disabled_ in the ✅ `recommended` config.
 

package/docs/aws-s3-bucket-insecure-http.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-s3-bucket-insecure-http
 
-📝 Authorizing HTTP communications with S3 buckets is security-sensitive.
+📝 S3 buckets should enforce HTTPS-only access.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-s3-bucket-public-access.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-s3-bucket-public-access
 
-📝 Allowing public ACLs or policies on a S3 bucket is security-sensitive.
+📝 Amazon S3 bucket public access should be fully blocked.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-s3-bucket-versioning.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-s3-bucket-versioning
 
-📝 Disabling versioning of S3 buckets is security-sensitive.
+📝 Amazon S3 buckets should have versioning enabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-sagemaker-unencrypted-notebook.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-sagemaker-unencrypted-notebook
 
-📝 Using unencrypted SageMaker notebook instances is security-sensitive.
+📝 SageMaker notebook instances should be encrypted at rest.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/aws-sns-unencrypted-topics.md

@@ -1,6 +1,6 @@
 # sonarjs/aws-sns-unencrypted-topics
 
-📝 Using unencrypted SNS topics is security-sensitive.
+📝 Amazon SNS topics should be encrypted at rest.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/code-eval.md

@@ -1,6 +1,6 @@
 # sonarjs/code-eval
 
-📝 Dynamically executing code is security-sensitive.
+📝 Dynamic code execution should not use user-controlled data.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/confidential-information-logging.md

@@ -1,7 +1,9 @@
 # sonarjs/confidential-information-logging
 
-📝 Allowing confidential information to be logged is security-sensitive.
+📝 Confidential information should not be logged.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/content-security-policy.md

@@ -1,6 +1,6 @@
 # sonarjs/content-security-policy
 
-📝 Disabling content security policy fetch directives is security-sensitive.
+📝 Content security policy fetch directives should not be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/cookie-no-httponly.md

@@ -1,6 +1,6 @@
 # sonarjs/cookie-no-httponly
 
-📝 Creating cookies without the "HttpOnly" flag is security-sensitive.
+📝 Cookies should have the "HttpOnly" flag.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/csrf.md

@@ -1,6 +1,6 @@
 # sonarjs/csrf
 
-📝 Disabling CSRF protections is security-sensitive.
+📝 CSRF protections should not be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/disabled-auto-escaping.md

@@ -1,6 +1,6 @@
 # sonarjs/disabled-auto-escaping
 
-📝 Disabling auto-escaping in template engines is security-sensitive.
+📝 Auto-escaping in HTML template engines should not be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/disabled-resource-integrity.md

@@ -1,6 +1,6 @@
 # sonarjs/disabled-resource-integrity
 
-📝 Using remote artifacts without integrity checks is security-sensitive.
+📝 Remote artifacts should not be used without integrity checks.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/dompurify-unsafe-config.md

@@ -4,4 +4,6 @@
 
 💼 This rule is enabled in the ✅ `recommended` config.
 
+💭 This rule requires [type information](https://typescript-eslint.io/linting/typed-linting).
+
 <!-- end auto-generated rule header -->

package/docs/frame-ancestors.md

@@ -1,7 +1,9 @@
 # sonarjs/frame-ancestors
 
-📝 Disabling content security policy frame-ancestors directive is security-sensitive.
+📝 Content Security Policy frame-ancestors directive should not be disabled.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/hashing.md

@@ -1,6 +1,6 @@
 # sonarjs/hashing
 
-📝 Using weak hashing algorithms is security-sensitive.
+📝 Weak hashing algorithms should not be used.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/hidden-files.md

@@ -1,7 +1,9 @@
 # sonarjs/hidden-files
 
-📝 Statically serving hidden files is security-sensitive.
+📝 Hidden files should not be served statically.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/hooks-before-test-cases.md

@@ -0,0 +1,7 @@
+# sonarjs/hooks-before-test-cases
+
+📝 Lifecycle hooks should not be interleaved with test cases or nested suites.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/no-angular-bypass-sanitization.md

@@ -1,6 +1,6 @@
 # sonarjs/no-angular-bypass-sanitization
 
-📝 Disabling Angular built-in sanitization is security-sensitive.
+📝 Angular built-in sanitization should not be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/no-clear-text-protocols.md

@@ -1,6 +1,6 @@
 # sonarjs/no-clear-text-protocols
 
-📝 Using clear-text protocols is security-sensitive.
+📝 Clear-text protocols should not be used.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/no-commented-code.md

@@ -2,7 +2,7 @@
 
 📝 Sections of code should not be commented out.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 💡 This rule is manually fixable by [editor suggestions](https://eslint.org/docs/latest/use/core-concepts#rule-suggestions).
 

package/docs/no-duplicate-test-title.md

@@ -0,0 +1,7 @@
+# sonarjs/no-duplicate-test-title
+
+📝 Test titles should be unique within the same suite.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/no-empty-test-title.md

@@ -0,0 +1,7 @@
+# sonarjs/no-empty-test-title
+
+📝 Test and suite titles should not be empty or whitespace-only.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/no-floating-point-equality.md

@@ -0,0 +1,7 @@
+# sonarjs/no-floating-point-equality
+
+📝 Floating point numbers should not be tested for equality.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/no-forced-browser-interaction.md

@@ -0,0 +1,7 @@
+# sonarjs/no-forced-browser-interaction
+
+📝 Forced browser interactions should not bypass actionability checks.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/no-incompatible-assertion-types.md

@@ -0,0 +1,9 @@
+# sonarjs/no-incompatible-assertion-types
+
+📝 Assertions comparing incompatible types should not be made.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+💭 This rule requires [type information](https://typescript-eslint.io/linting/typed-linting).
+
+<!-- end auto-generated rule header -->

package/docs/no-intrusive-permissions.md

@@ -1,8 +1,10 @@
 # sonarjs/no-intrusive-permissions
 
-📝 Using intrusive permissions is security-sensitive.
+📝 Sensitive permissions should not be requested unnecessarily.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->
 

package/docs/no-ip-forward.md

@@ -1,7 +1,9 @@
 # sonarjs/no-ip-forward
 
-📝 Forwarding client IP address is security-sensitive.
+📝 Client IP address should not be forwarded to proxies.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/no-mime-sniff.md

@@ -1,6 +1,6 @@
 # sonarjs/no-mime-sniff
 
-📝 Allowing browsers to sniff MIME types is security-sensitive.
+📝 Browsers should not be allowed to perform MIME type sniffing.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/no-mixed-content.md

@@ -1,7 +1,9 @@
 # sonarjs/no-mixed-content
 
-📝 Allowing mixed-content is security-sensitive.
+📝 Content Security Policy should block mixed-content.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/no-os-command-from-path.md

@@ -1,6 +1,6 @@
 # sonarjs/no-os-command-from-path
 
-📝 Searching OS commands in PATH is security-sensitive.
+📝 OS commands should not rely on PATH resolution.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/no-referrer-policy.md

@@ -1,6 +1,6 @@
 # sonarjs/no-referrer-policy
 
-📝 Disabling strict HTTP no-referrer policy is security-sensitive.
+📝 HTTP Referrer-Policy should not be set to an unsafe value.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/no-small-switch.md

@@ -4,4 +4,6 @@
 
 💼 This rule is enabled in the ✅ `recommended` config.
 
+💭 This rule requires [type information](https://typescript-eslint.io/linting/typed-linting).
+
 <!-- end auto-generated rule header -->

package/docs/no-trivial-assertions.md

@@ -0,0 +1,7 @@
+# sonarjs/no-trivial-assertions
+
+📝 Assertions should not fail or succeed unconditionally.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/docs/os-command.md

@@ -1,7 +1,9 @@
 # sonarjs/os-command
 
-📝 Using shell interpreter when executing OS commands is security-sensitive.
+📝 OS commands should not be executed using a shell interpreter.
 
-💼 This rule is enabled in the ✅ `recommended` config.
+❌ This rule is deprecated.
+
+🚫 This rule is _disabled_ in the ✅ `recommended` config.
 
 <!-- end auto-generated rule header -->

package/docs/prefer-specific-assertions.md

@@ -0,0 +1,9 @@
+# sonarjs/prefer-specific-assertions
+
+📝 The most specific assertion should be used.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+💡 This rule is manually fixable by [editor suggestions](https://eslint.org/docs/latest/use/core-concepts#rule-suggestions).
+
+<!-- end auto-generated rule header -->

package/docs/production-debug.md

@@ -1,6 +1,6 @@
 # sonarjs/production-debug
 
-📝 Delivering code in production with debug features activated is security-sensitive.
+📝 Debugging features should not be enabled in production.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/pseudo-random.md

@@ -1,6 +1,6 @@
 # sonarjs/pseudo-random
 
-📝 Using pseudorandom number generators (PRNGs) is security-sensitive.
+📝 Pseudorandom number generators (PRNGs) should not be used in security contexts.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/slow-regex.md

@@ -1,6 +1,6 @@
 # sonarjs/slow-regex
 
-📝 Using slow regular expressions is security-sensitive.
+📝 Regular expressions should not cause catastrophic backtracking.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/sql-queries.md

@@ -1,6 +1,6 @@
 # sonarjs/sql-queries
 
-📝 Formatting SQL queries is security-sensitive.
+📝 SQL queries should not be dynamically formatted.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/strict-transport-security.md

@@ -1,6 +1,6 @@
 # sonarjs/strict-transport-security
 
-📝 Disabling Strict-Transport-Security policy is security-sensitive.
+📝 HTTP Strict-Transport-Security policy should not be disabled.
 
 💼 This rule is enabled in the ✅ `recommended` config.
 

package/docs/super-linear-regex.md

@@ -0,0 +1,7 @@
+# sonarjs/super-linear-regex
+
+📝 Regular expressions should not cause non-linear backtracking.
+
+💼 This rule is enabled in the ✅ `recommended` config.
+
+<!-- end auto-generated rule header -->

package/package.json

@@ -21,7 +21,7 @@
   },
   "types": "./types/plugin.d.ts",
   "name": "eslint-plugin-sonarjs",
-  "version": "4.0.3",
+  "version": "4.1.0",
   "dependencies": {
     "typescript": ">=5",
     "jsx-ast-utils-x": "^0.1.0",
@@ -29,11 +29,12 @@
     "functional-red-black-tree": "^1.0.1",
     "@eslint-community/regexpp": "^4.12.2",
     "minimatch": "^10.2.5",
-    "semver": "^7.7.4",
-    "ts-api-utils": "^2.5.0",
+    "yaml": "^2.9.0",
+    "semver": "^7.8.4",
     "scslre": "^0.3.0",
+    "ts-api-utils": "^2.5.0",
     "bytes": "^3.1.2",
     "builtin-modules": "^3.3.0",
-    "globals": "^17.4.0"
+    "globals": "^17.6.0"
   }
 }

package/types/S100/generated-meta.d.ts

@@ -17,3 +17,4 @@ export declare const sonarKey = "S100";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S101/generated-meta.d.ts

@@ -17,3 +17,4 @@ export declare const sonarKey = "S101";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S104/generated-meta.d.ts

@@ -17,3 +17,4 @@ export declare const sonarKey = "S104";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S105/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S105";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1066/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1066";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1067/generated-meta.d.ts

@@ -17,3 +17,4 @@ export declare const sonarKey = "S1067";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1110/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1110";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1119/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1119";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S1121/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1121";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1125/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1125";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S1126/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1126";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S1128/generated-meta.d.ts

@@ -15,4 +15,5 @@ export declare const sonarKey = "S1128";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;
 export declare const requiredEcmaVersion = 2015;

package/types/S1134/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1134";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S1135/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1135";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = true;

package/types/S1154/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1154";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S117/generated-meta.d.ts

@@ -17,3 +17,4 @@ export declare const sonarKey = "S117";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1172/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1172";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1192/generated-meta.d.ts

@@ -18,3 +18,4 @@ export declare const sonarKey = "S1192";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1219/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1219";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S1226/generated-meta.d.ts

@@ -15,3 +15,4 @@ export declare const sonarKey = "S1226";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/S124/generated-meta.d.ts

@@ -19,3 +19,4 @@ export declare const sonarKey = "S124";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;

package/types/{S2255 → S1244}/generated-meta.d.ts

@@ -8,10 +8,11 @@ export declare const meta: {
         requiresTypeChecking: false;
     };
     fixable: undefined;
-    deprecated: true;
+    deprecated: false;
     defaultOptions: never[];
 };
-export declare const sonarKey = "S2255";
+export declare const sonarKey = "S1244";
 export declare const scope = "Main";
 export declare const languages: ('js' | 'ts')[];
 export declare const requiredDependency: never[];
+export declare const skipOnGeneratedSource = false;