salesforce-lightning-cli/rules/secure-window.js

Lightning CLI Heroku Plugin

/*
 * Copyright (C) 2016 salesforce.com, inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

"use strict";

var util = require("../lib/util.js");

var globalBlackList = {
    setImmediate: true,
    MutationEvent: true,
    ServiceWorker: true,
    ServiceWorkerContainer: true,
    ServiceWorkerMessageEvent: true,
    ServiceWorkerRegistration: true,
    ShadowRoot: true,
    SharedWorker: true,
    WebKitMutationObserver: true,
    clientInformation: true,
    eval: false,
    onwebkitanimationend: true,
    onwebkitanimationiteration: true,
    onwebkitanimationstart: true,
    onwebkittransitionend: true,
    opener: true,
    top: true,
    webkitAudioContext: true,
    webkitCancelAnimationFrame: true,
    webkitCancelRequestAnimationFrame: true,
    webkitIDBCursor: true,
    webkitIDBDatabase: true,
    webkitIDBFactory: true,
    webkitIDBIndex: true,
    webkitIDBKeyRange: true,
    webkitIDBObjectStore: true,
    webkitIDBRequest: true,
    webkitIDBTransaction: true,
    webkitIndexedDB: true,
    webkitMediaStream: true,
    webkitOfflineAudioContext: true,
    webkitRTCPeerConnection: true,
    webkitRequestAnimationFrame: true,
    webkitRequestFileSystem: true,
    webkitResolveLocalFileSystemURL: true,
    webkitSpeechGrammar: true,
    webkitSpeechGrammarList: true,
    webkitSpeechRecognition: true,
    webkitSpeechRecognitionError: true,
    webkitSpeechRecognitionEvent: true,
    webkitStorageInfo: true,
    webkitURL: true
};

module.exports = function(context) {
    var globalScope;

    return {
        Program: function() {
            globalScope = context.getScope();
        },

        CallExpression: function(node) {
            var callee = node.callee,
                currentScope = context.getScope();

            if (callee.type === "Identifier") {
                if (!util.isShadowed(currentScope, globalScope, callee)) {
                    if (globalBlackList[callee.name]) {
                        context.report(
                            node,
                            "Invalid SecureWindow API, " +
                                callee.name +
                                " was blacklisted"
                        );
                    }
                }
            }
        },

        MemberExpression: function(node) {
            if (node.parent.type === "MemberExpression") {
                // ignoring intermediate member expressions
                return;
            }
            var currentScope = context.getScope();
            var ns = util.buildMemberExpressionNamespace(
                currentScope,
                globalScope,
                node
            );
            if (ns.length > 0) {
                var rootIdentifier = ns[0];
                var name = rootIdentifier.name;
                if (rootIdentifier.type === "Literal") {
                    name = rootIdentifier.value;
                }
                if (
                    util.isShadowed(currentScope, globalScope, rootIdentifier)
                ) {
                    // nothing to do here, it was shadowed by the user
                    return;
                }
                if (globalBlackList[name]) {
                    context.report(
                        node,
                        "Invalid SecureWindow API, " + name + " was blacklisted"
                    );
                    return;
                }
            }
        }
    };
};

module.exports.schema = [];