mcp-server-semgrep/semgrep-rules/typescript/react/best-practice/react-find-dom.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: react-find-dom
    pattern-either:
      - pattern: |
          findDOMNode(...)
      - pattern: |
          $DOM.findDOMNode(...)
    message: >-
      findDOMNode is an escape hatch used to access the underlying DOM node. In most cases, use of this escape hatch is discouraged because it pierces the component abstraction.
    metadata:
      references:
        - https://react.dev/reference/react-dom/findDOMNode
        - https://github.com/yannickcr/eslint-plugin-react/issues/678#issue-165177220
      category: best-practice
      technology:
        - react
    languages:
      - typescript
      - javascript
    severity: WARNING