@nodesecure/js-x-ray/src/probes/isLiteralRegex.js

JavaScript AST XRay analysis

// Require Third-party Dependencies
import { isLiteralRegex } from "@nodesecure/estree-ast-utils";
import safeRegex from "safe-regex";

/**
 * @description Search for RegExpLiteral AST Node
 * @see https://github.com/estree/estree/blob/master/es5.md#regexpliteral
 * @example
 * /hello/
 */
function validateNode(node) {
  return [
    isLiteralRegex(node)
  ];
}

function main(node, options) {
  const { sourceFile } = options;

  // We use the safe-regex package to detect whether or not regex is safe!
  if (!safeRegex(node.regex.pattern)) {
    sourceFile.addWarning("unsafe-regex", node.regex.pattern, node.loc);
  }
}

export default {
  name: "isLiteralRegex",
  validateNode,
  main,
  breakOnMatch: false
};