12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061 |
- /**
- * @fileoverview Rule to flag when using javascript: urls
- * @author Ilya Volodin
- */
- /* eslint no-script-url: 0 -- Code is checking to report such URLs */
- "use strict";
- const astUtils = require("./utils/ast-utils");
- //------------------------------------------------------------------------------
- // Rule Definition
- //------------------------------------------------------------------------------
- /** @type {import('../shared/types').Rule} */
- module.exports = {
- meta: {
- type: "suggestion",
- docs: {
- description: "Disallow `javascript:` urls",
- recommended: false,
- url: "https://eslint.org/docs/rules/no-script-url"
- },
- schema: [],
- messages: {
- unexpectedScriptURL: "Script URL is a form of eval."
- }
- },
- create(context) {
- /**
- * Check whether a node's static value starts with "javascript:" or not.
- * And report an error for unexpected script URL.
- * @param {ASTNode} node node to check
- * @returns {void}
- */
- function check(node) {
- const value = astUtils.getStaticStringValue(node);
- if (typeof value === "string" && value.toLowerCase().indexOf("javascript:") === 0) {
- context.report({ node, messageId: "unexpectedScriptURL" });
- }
- }
- return {
- Literal(node) {
- if (node.value && typeof node.value === "string") {
- check(node);
- }
- },
- TemplateLiteral(node) {
- if (!(node.parent && node.parent.type === "TaggedTemplateExpression")) {
- check(node);
- }
- }
- };
- }
- };
|