oxlint-plugin-react-doctor 0.5.6-dev.424d8f9 → 0.5.6-dev.431e515

package/dist/index.js

@@ -890,64 +890,24 @@ const advancedEventHandlerRefs = defineRule({
 });
 //#endregion
 //#region src/plugin/rules/security-scan/utils/strip-comments-preserving-positions.ts
-const WHITESPACE_PATTERN = /\s/;
-const quotedLiteralHasWhitespace = (content, openQuoteIndex, delimiter) => {
-	for (let cursor = openQuoteIndex + 1; cursor < content.length; cursor += 1) {
-		const character = content[cursor];
-		if (character === "\\") {
-			cursor += 1;
-			continue;
-		}
-		if (character === delimiter) return false;
-		if (WHITESPACE_PATTERN.test(character)) return true;
-	}
-	return false;
-};
-const blankNonCodePreservingPositions = (content, blankStringContents) => {
+const stripCommentsPreservingPositions = (content) => {
 	const characters = content.split("");
 	let stringDelimiter = null;
-	let isBlankingString = false;
-	const templateExpressionDepths = [];
 	let index = 0;
-	const blankUnlessNewline = (offset) => {
-		if (offset < content.length && content[offset] !== "\n") characters[offset] = " ";
-	};
 	while (index < content.length) {
 		const character = content[index];
 		const nextCharacter = content[index + 1];
 		if (stringDelimiter !== null) {
 			if (character === "\\") {
-				if (isBlankingString) {
-					blankUnlessNewline(index);
-					blankUnlessNewline(index + 1);
-				}
-				index += 2;
-				continue;
-			}
-			if (character === stringDelimiter) {
-				stringDelimiter = null;
-				index += 1;
-				continue;
-			}
-			if (blankStringContents && stringDelimiter === "`" && character === "$" && nextCharacter === "{") {
-				templateExpressionDepths.push(0);
-				stringDelimiter = null;
 				index += 2;
 				continue;
 			}
-			if (isBlankingString) blankUnlessNewline(index);
+			if (character === stringDelimiter) stringDelimiter = null;
 			index += 1;
 			continue;
 		}
-		if (character === "\"" || character === "'") {
+		if (character === "\"" || character === "'" || character === "`") {
 			stringDelimiter = character;
-			isBlankingString = blankStringContents && quotedLiteralHasWhitespace(content, index, character);
-			index += 1;
-			continue;
-		}
-		if (character === "`") {
-			stringDelimiter = "`";
-			isBlankingString = blankStringContents;
 			index += 1;
 			continue;
 		}
@@ -966,42 +926,29 @@ const blankNonCodePreservingPositions = (content, blankStringContents) => {
 					index += 2;
 					break;
 				}
-				blankUnlessNewline(index);
+				if (content[index] !== "\n") characters[index] = " ";
 				index += 1;
 			}
 			continue;
 		}
-		if (templateExpressionDepths.length > 0) {
-			const innermost = templateExpressionDepths.length - 1;
-			if (character === "{") templateExpressionDepths[innermost] += 1;
-			else if (character === "}") if (templateExpressionDepths[innermost] === 0) {
-				templateExpressionDepths.pop();
-				stringDelimiter = "`";
-				isBlankingString = blankStringContents;
-			} else templateExpressionDepths[innermost] -= 1;
-		}
 		index += 1;
 	}
 	return characters.join("");
 };
-const stripCommentsPreservingPositions = (content) => blankNonCodePreservingPositions(content, false);
-const stripCommentsAndStringLiteralsPreservingPositions = (content) => blankNonCodePreservingPositions(content, true);
 //#endregion
 //#region src/plugin/rules/security-scan/utils/scan-by-pattern.ts
 const strippedContentCache = /* @__PURE__ */ new WeakMap();
-const stringStrippedContentCache = /* @__PURE__ */ new WeakMap();
-const getScannableContent = (file, ignoreStringLiterals = false) => {
+const getScannableContent = (file) => {
 	if (!SOURCE_FILE_PATTERN.test(file.relativePath)) return file.content;
-	const cache = ignoreStringLiterals ? stringStrippedContentCache : strippedContentCache;
-	const cachedContent = cache.get(file);
+	const cachedContent = strippedContentCache.get(file);
 	if (cachedContent !== void 0) return cachedContent;
-	const strippedContent = ignoreStringLiterals ? stripCommentsAndStringLiteralsPreservingPositions(file.content) : stripCommentsPreservingPositions(file.content);
-	cache.set(file, strippedContent);
+	const strippedContent = stripCommentsPreservingPositions(file.content);
+	strippedContentCache.set(file, strippedContent);
 	return strippedContent;
 };
-const scanByPattern = ({ shouldScan, pattern, requireAll, suppressWhen, ignoreStringLiterals, message }) => (file) => {
+const scanByPattern = ({ shouldScan, pattern, requireAll, suppressWhen, message }) => (file) => {
 	if (!shouldScan(file)) return [];
-	const content = getScannableContent(file, ignoreStringLiterals);
+	const content = getScannableContent(file);
 	if (requireAll !== void 0 && !requireAll.every((gate) => gate.test(content))) return [];
 	const matchedPattern = (pattern instanceof RegExp ? [pattern] : pattern).find((candidate) => candidate.test(content));
 	if (matchedPattern === void 0) return [];
@@ -1026,7 +973,6 @@ const agentToolCapabilityRisk = defineRule({
 		shouldScan: (file) => isProductionSourcePath(file.relativePath) && AGENT_TOOL_CONTEXT_PATH_PATTERN.test(file.relativePath),
 		pattern: AGENT_TOOL_DEFINITION_PATTERN,
 		requireAll: [AGENT_TOOL_DANGEROUS_CAPABILITY_PATTERN],
-		ignoreStringLiterals: true,
 		message: "An agent-callable tool appears to expose network, filesystem, shell, or code-execution capability."
 	})
 });
@@ -13521,7 +13467,6 @@ const mcpToolCapabilityRisk = defineRule({
 		shouldScan: (file) => isProductionSourcePath(file.relativePath),
 		pattern: /\bserver\.\s*tool\s*\(|\bregisterTool\s*\(|\bsetRequestHandler\s*\(\s*CallToolRequestSchema/,
 		requireAll: [/\bfrom\s+["']@modelcontextprotocol\/sdk[^"']*["']|\bMcpServer\b|\bMcpAgent\b/, AGENT_TOOL_DANGEROUS_CAPABILITY_PATTERN],
-		ignoreStringLiterals: true,
 		message: "An MCP tool/resource/prompt handler appears to expose file, shell, network, or code-execution capability."
 	})
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oxlint-plugin-react-doctor",
-  "version": "0.5.6-dev.424d8f9",
+  "version": "0.5.6-dev.431e515",
   "description": "oxlint plugin for React Doctor: diagnose React codebases for security, performance, correctness, accessibility, bundle-size, and architecture issues",
   "keywords": [
     "accessibility",