New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →

Sign in Demo Install

Sign in Demo Install

eslint-plugin-angularjs-security-rules

Package Overview

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

eslint-plugin-angularjs-security-rules

ESLint plugin that contains AngularJS rules

1.0.0
npm

Version published: 7 years ago

Weekly downloads: 2.5K; increased by11.28%

Maintainers: 1

Weekly downloads

Created: 7 years ago

AngularJS Security Rules For ESLint

These rules are to supplement the security issues documented in my talks at OWASP London and FluentConf around AngularJS Security.

The current ruleset supports only Angular 1.x issues, and can be noisy, but they are a work in progress.

Current rules are:

detect-angular-element-methods
detect-angular-open-redirect
detect-angular-orderBy-expressions
detect-angular-resource-loading
detect-angular-sce-disabled
detect-angular-scope-expressions
detect-angular-service-expressions
detect-angular-trustAs-methods
detect-third-party-angular-translate

TODO:

Each rule needs better detection, and possibly taint analysis
Add more rules related to Angular 1.0 - 5 in mind.
Add Angular 2/4 security issues such as bypassSecurityTrustHtml

If you feel anything is missing or would like to see additional rules added, feel free to write an issue

Keywords

FAQs

What is eslint-plugin-angularjs-security-rules?

Is eslint-plugin-angularjs-security-rules popular?

Is eslint-plugin-angularjs-security-rules well maintained?

Package last updated on 20 Jan 2018

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Related posts