solium-plugin-security/rules/no-call-value.js

Official Solium Plugin for Security-related lint rules

/**
 * @fileoverview Discourage use of .call.value()()
 * @author Raghav Dua <duaraghav8@gmail.com>
 */

"use strict";

module.exports = {

    meta: {
        docs: {
            description: "Discourage use of .call.value()()",
            recommended: true,
            type: "error"
        },

        schema: []
    },

    create(context) {
        function reportIfcallvalueUsed(emitted) {
            if (emitted.exit) { return; }

            const {node} = emitted, {object, property} = node.callee;

            if (node.callee.type === "MemberExpression" && property.type === "Identifier" && property.name === "value"
                && object.type === "MemberExpression" && object.property.type === "Identifier"
                && object.property.name === "call") {

                context.report({
                    node,
                    location: {
                        column: context.getSourceCode().getColumn(object.property)
                    },
                    message: "Consider using 'transfer' in place of 'call.value()'."
                });

            }
        }

        return {
            CallExpression: reportIfcallvalueUsed
        };
    }

};