pi-lens/rules/ast-grep-rules/rule-tests/no-javascript-url-js-test.yml

Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo

id: no-javascript-url-js
valid:
  - 'a.href = "https://x"'
  - 'a.href = "https://example.com"'
  - 'a.href = "/"'
invalid:
  - 'a.href = "javascript:alert(1)"'
  - 'a.href = "javascript:void(0)"'
  - 'const u = "javascript:alert(1)"'