eslint-community/eslint-plugin-security

Issues

• detect-jquery-globalEval.js

  #167 opened a month ago by guoyutian1111222333
  3

• New Config: Avoiding intrusive and dangerous dependencies

  #166 opened 2 months ago by brettz9
  2

• Bug: no type definitions for eslint flat config

  #157 opened 4 months ago by TheElegantCoding
  3

• ESLint v9 compatibility (TypeError: context.getScope is not a function)

  #144 opened 5 months ago by rivajunior
  8

• Does This Plugin Support TypeScript?

  #155 opened 5 months ago by Barzi-Ahmed
  5

• Bug: (fill in)

  #154 opened 5 months ago by nowaysgit
  1

• Add support for flat config and types

  #142 opened 6 months ago by TheElegantCoding
  1

• Heuristics for detect-object-injection

  #67 opened 7 months ago by adrianhelvik
  3

• Bug: object injection not detected

  #112 opened 7 months ago by FizzBuzz791
  2

• Bug: false positive for security/detect-object-injection

  #136 opened 7 months ago by AnnAngela
  2

• Bug: security/detect-eval-with-expression - "TypeError: Cannot read properties of undefined (reading: 'type')

  #138 opened 7 months ago by bestickley
  6

• Bug: Configuration using JSON eslintrc file

  #137 opened 8 months ago by armfazh
  2

• Bug: Crashes ESLint due to circular reference in config

  #131 opened 9 months ago by maxmilton
  4

• Upgrade causes obscure error

  #135 opened 9 months ago by bibble235
  4

• Bug: Converting circular structure to JSON when running eslint

  #134 opened 9 months ago by cthacker-udel
  2

• Is this a timing attack?

  #70 opened 3 years ago by jimisaacs
  3

• Console text bold after running this extension

  #50 opened a year ago by Mahan-F
  1

• Rule Change: (fill in)

  #127 opened a year ago by mathieulb
  2

• Bug: `security/detect-object-injection` should be ignored when property is switch case discriminant.

  #124 opened a year ago by loynoir
  2

• `security/detect-object-injection` false alarm on type safe key

  #126 opened a year ago by loynoir
  5

• Bug: `security/detect-non-literal-regexp` should ignore `escapeStringRegexp()`

  #123 opened a year ago by loynoir
  1

• A Suggestion for the Docs

  #115 opened 2 years ago by MahdiAljazairi
  2

• New Rule: disallow unicode confusable identifiers

  #117 opened 2 years ago by mhofman
  4

• New Rule: Detect invisible characters

  #116 opened 2 years ago by nzakas
  0

• Should __dirname be ignored in detect-non-literal-require?

  #49 opened 2 years ago by achimkoellner
  0

• False alarm for “Found fs.readFile with non literal argument at index 0”?

  #65 opened 2 years ago by hongbo-miao
  5

• docs: maybe an error in the-dangers-of-square-bracket-notation

  #110 opened 2 years ago by helicese
  1

• Improve detect-child-process rule

  #104 opened 2 years ago by ota-meshi
  0

• Capture group names causing linter to report unsafe regex

  #52 opened 2 years ago by MatthewHerbst
  5

• I would like to take over as maintainer

  #71 opened 2 years ago by nzakas
  24

• Plugin security/recommended giving link error

  #55 opened 2 years ago by PPInfy
  2

• False positive for detect-non-literal-fs-filename

  #54 opened 2 years ago by freaktechnik
  11

• `detect-non-literal-fs-filename` matches inconsistently

  #88 opened 2 years ago by TikiTDO
  2

• Including "unicode bidi attacks" defense

  #72 opened 2 years ago by fritx
  2

• Package Modernization

  #75 opened 2 years ago by nzakas
  10

• detect-child-process false-positive with spawn

  #51 opened 2 years ago by EvgenyOrekhov
  5

• docs: use `eslint-doc-generator`

  #99 opened 2 years ago by MichaelDeBoey
  0

• detect-child-process false-positive with exec

  #64 opened 2 years ago by modestfake
  1

• Invitation to move to official `eslint-community` org

  #93 opened 2 years ago by MichaelDeBoey
  7

• TypeError: Cannot read property 'type' of undefined in detect-child-process rule

  #69 opened 2 years ago by XERXES-MOUSAVI
  4

• Add missing 1.5.0 changelog

  #84 opened 2 years ago by sampsakuronen
  0

• Java generator always adds @Json annotations for enums

  #90 opened 2 years ago by micro-jumbo
  0

• Deprecate detect-buffer-noassert

  #83 opened 2 years ago by nzakas
  0

• Help wanted: Issue and PR Review

  #76 opened 2 years ago by nzakas
  2

• continuous integration

  #58 opened 2 years ago by oprogramador
  2

• Is it alive?

  #56 opened 2 years ago by magmel48
  3

• Develop & Maintain

  #60 opened 2 years ago by gkouziik
  3

• Is this still maintained ?

  #66 opened 2 years ago by Tjerk-Haaye-Henricus
  4

• tslint

  #57 opened 5 years ago by oprogramador
  1

• Plugin security/recommended giving link error

  #53 opened 5 years ago by opensourceally
  1