@microsoft/eslint-plugin-sdl - npm Package Compare versions

Comparing version 0.1.6 to 0.1.7

lib/rules/no-insecure-url.js

@@ -19,3 +19,4 @@ // Copyright (c) Microsoft Corporation.
     /^http:(\/\/|\\u002f\\u002f)schemas\.microsoft\.com(\/\/|\\u002f\\u002f)?.*/i,
-    /^http:(\/\/|\\u002f\\u002f)schemas\.openxmlformats\.org(\/\/|\\u002f\\u002f)?.*/i
+    /^http:(\/\/|\\u002f\\u002f)schemas\.openxmlformats\.org(\/\/|\\u002f\\u002f)?.*/i,
+    /^http:(\/|\\u002f){2}localhost(:|\/|\\u002f)*/i
 ];
@@ -70,3 +71,8 @@
                 if (typeof node.value === "string") {
-                    if (matches(blocklist, node.value) && !matches(exceptions, node.value)) {
+                    // Add an exception for xmlns attributes
+                    if(node.parent && node.parent.type === "JSXAttribute" && node.parent.name && node.parent.name.name === "xmlns")
+                    {
+                        // Do nothing
+                    }
+                    else if (matches(blocklist, node.value) && !matches(exceptions, node.value)) {
                         context.report({
@@ -73,0 +79,0 @@ node: node,

package.json

 {
   "name": "@microsoft/eslint-plugin-sdl",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "ESLint plugin focused on common security issues and misconfigurations discoverable during static testing as part of Microsoft Security Development Lifecycle (SDL)",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

71832

increased by0.61%

Lines of code

1163

increased by0.52%

No dependency changes