@microsoft/eslint-plugin-sdl/config/common.js

ESLint plugin focused on common security issues and misconfigurations discoverable during static testing as part of Microsoft Security Development Lifecycle (SDL)

// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.

"use strict";

module.exports = (pluginSdl) => {
  return [
    {
      plugins: {
        "@microsoft/sdl": pluginSdl
      },
      rules: {
        "no-caller": "error",
        "no-delete-var": "error",
        "no-eval": "error",
        "no-implied-eval": "error",
        "no-new-func": "error",
        "@microsoft/sdl/no-cookies": "error",
        "@microsoft/sdl/no-document-domain": "error",
        "@microsoft/sdl/no-document-write": "error",
        "@microsoft/sdl/no-html-method": "error",
        "@microsoft/sdl/no-inner-html": "error",
        "@microsoft/sdl/no-insecure-url": "error",
        "@microsoft/sdl/no-msapp-exec-unsafe": "error",
        "@microsoft/sdl/no-postmessage-star-origin": "error",
        "@microsoft/sdl/no-winjs-html-unsafe": "error"
      }
    }
  ];
};