f44969a5ab
We have been stalled on ESLint 3.8.0 for some time. Current ESLint is 3.13.0. We have been unable to upgrade because of more aggressive reporting on some rules, including indentation. ESLint configuration options and bugfixes are now such that we can reasonably upgrade. PR-URL: https://github.com/nodejs/node/pull/10561 Reviewed-By: Teddy Katz <teddy.katz@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
41 lines
987 B
JavaScript
41 lines
987 B
JavaScript
/**
|
|
* @fileoverview Rule to flag when using javascript: urls
|
|
* @author Ilya Volodin
|
|
*/
|
|
/* jshint scripturl: true */
|
|
/* eslint no-script-url: 0 */
|
|
|
|
"use strict";
|
|
|
|
//------------------------------------------------------------------------------
|
|
// Rule Definition
|
|
//------------------------------------------------------------------------------
|
|
|
|
module.exports = {
|
|
meta: {
|
|
docs: {
|
|
description: "disallow `javascript:` urls",
|
|
category: "Best Practices",
|
|
recommended: false
|
|
},
|
|
|
|
schema: []
|
|
},
|
|
|
|
create(context) {
|
|
|
|
return {
|
|
|
|
Literal(node) {
|
|
if (node.value && typeof node.value === "string") {
|
|
const value = node.value.toLowerCase();
|
|
|
|
if (value.indexOf("javascript:") === 0) {
|
|
context.report({ node, message: "Script URL is a form of eval." });
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
}
|
|
};
|