
Security News
libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable Burden
Libxml2’s solo maintainer drops embargoed security fixes, highlighting the burden on unpaid volunteers who keep critical open source software secure.
eslint-plugin-regexp
Advanced tools
ESLint plugin for finding RegExp mistakes and RegExp style guide violations.
eslint-plugin-regexp is an ESLint plugin that provides linting rules for regular expressions. It helps developers write more efficient, readable, and secure regular expressions by catching common mistakes and suggesting improvements.
No Unnecessary Escape
This rule disallows unnecessary escape characters in regular expressions. In the example, the backslash before the dot is unnecessary and should be removed.
/* eslint regexp/no-useless-escape: 'error' */
const regex = /\./;
No Obscure Character Class
This rule disallows obscure character class ranges that can be confusing or error-prone. In the example, the character class is clear and does not contain obscure ranges.
/* eslint regexp/no-obscure-range: 'error' */
const regex = /[a-zA-Z]/;
No Unnecessary Quantifier
This rule disallows unnecessary quantifiers in regular expressions. In the example, the quantifier {1} is unnecessary and should be removed.
/* eslint regexp/no-useless-quantifier: 'error' */
const regex = /a{1}/;
No Empty Character Class
This rule disallows empty character classes in regular expressions. In the example, the character class is empty and should be corrected.
/* eslint regexp/no-empty-character-class: 'error' */
const regex = /[]/;
eslint-plugin-security is an ESLint plugin that helps identify potential security issues in JavaScript code. While it covers a broader range of security concerns, it includes some rules related to regular expressions, such as detecting potential ReDoS (Regular Expression Denial of Service) vulnerabilities. It is more general in scope compared to eslint-plugin-regexp.
eslint-plugin-unicorn is a collection of various ESLint rules aimed at improving code quality and consistency. It includes some rules for regular expressions, such as preventing potential ReDoS attacks and suggesting more readable patterns. However, it is not as focused on regular expressions as eslint-plugin-regexp.
eslint-plugin-regexp is ESLint plugin for finding RegExp mistakes and RegExp style guide violations.
This ESLint plugin provides linting rules relate to better ways to help you avoid problems when using RegExp.
You can check on the Online DEMO.
See documents.
npm install --save-dev eslint eslint-plugin-regexp
Requirements
- ESLint v6.0.0 and above
- Node.js v12.x, v14.x and above
Add regexp
to the plugins section of your .eslintrc
configuration file (you can omit the eslint-plugin-
prefix)
and either use one of the two configurations available (recommended
or all
) or configure the rules you want:
The plugin:regexp/recommended
config enables a subset of the rules that should be most useful to most users.
See lib/configs/recommended.ts for more details.
// .eslintrc.js
module.exports = {
"plugins": [
"regexp"
],
"extends": [
// add more generic rulesets here, such as:
// 'eslint:recommended',
"plugin:regexp/recommended"
]
}
Override/add specific rules configurations. See also: http://eslint.org/docs/user-guide/configuring.
// .eslintrc.js
module.exports = {
"plugins": [
"regexp"
],
"rules": {
// Override/add rules settings here, such as:
"regexp/rule-name": "error"
}
}
"plugin:regexp/all"
The plugin:regexp/all
config enables all rules. It's meant for testing, not for production use because it changes with every minor and major version of the plugin. Use it at your own risk.
See lib/configs/all.ts for more details.
The --fix
option on the command line automatically fixes problems reported by rules which have a wrench :wrench: below.
The rules with the following star :star: are included in the plugin:regexp/recommended
config.
Rule ID | Description | |
---|---|---|
regexp/no-dupe-disjunctions | disallow duplicate disjunctions | :star: |
regexp/no-empty-alternative | disallow alternatives without elements | :star: |
regexp/no-empty-capturing-group | disallow capturing group that captures empty. | :star: |
regexp/no-empty-group | disallow empty group | :star: |
regexp/no-empty-lookarounds-assertion | disallow empty lookahead assertion or empty lookbehind assertion | :star: |
regexp/no-escape-backspace | disallow escape backspace ([\b] ) | :star: |
regexp/no-invalid-regexp | disallow invalid regular expression strings in RegExp constructors | :star: |
regexp/no-lazy-ends | disallow lazy quantifiers at the end of an expression | :star: |
regexp/no-optional-assertion | disallow optional assertions | :star: |
regexp/no-potentially-useless-backreference | disallow backreferences that reference a group that might not be matched | :star: |
regexp/no-super-linear-backtracking | disallow exponential and polynomial backtracking | :star::wrench: |
regexp/no-super-linear-move | disallow quantifiers that cause quadratic moves | |
regexp/no-useless-assertions | disallow assertions that are known to always accept (or reject) | :star: |
regexp/no-useless-backreference | disallow useless backreferences in regular expressions | :star: |
regexp/no-useless-dollar-replacements | disallow useless $ replacements in replacement string | :star: |
regexp/strict | disallow not strictly valid regular expressions | :star::wrench: |
Rule ID | Description | |
---|---|---|
regexp/confusing-quantifier | disallow confusing quantifiers | :star: |
regexp/control-character-escape | enforce consistent escaping of control characters | :star::wrench: |
regexp/negation | enforce use of escapes on negation | :star::wrench: |
regexp/no-dupe-characters-character-class | disallow duplicate characters in the RegExp character class | :star::wrench: |
regexp/no-invisible-character | disallow invisible raw character | :star::wrench: |
regexp/no-legacy-features | disallow legacy RegExp features | :star: |
regexp/no-non-standard-flag | disallow non-standard flags | :star: |
regexp/no-obscure-range | disallow obscure character ranges | :star: |
regexp/no-octal | disallow octal escape sequence | |
regexp/no-standalone-backslash | disallow standalone backslashes (\ ) | |
regexp/no-trivially-nested-assertion | disallow trivially nested assertions | :star::wrench: |
regexp/no-trivially-nested-quantifier | disallow nested quantifiers that can be rewritten as one quantifier | :star::wrench: |
regexp/no-unused-capturing-group | disallow unused capturing group | :star::wrench: |
regexp/no-useless-character-class | disallow character class with one character | :star::wrench: |
regexp/no-useless-flag | disallow unnecessary regex flags | :star::wrench: |
regexp/no-useless-lazy | disallow unnecessarily non-greedy quantifiers | :star::wrench: |
regexp/no-useless-quantifier | disallow quantifiers that can be removed | :star::wrench: |
regexp/no-useless-range | disallow unnecessary range of characters by using a hyphen | :star::wrench: |
regexp/no-useless-two-nums-quantifier | disallow unnecessary {n,m} quantifier | :star::wrench: |
regexp/no-zero-quantifier | disallow quantifiers with a maximum of zero | :star: |
regexp/optimal-lookaround-quantifier | disallow the alternatives of lookarounds that end with a non-constant quantifier | :star: |
regexp/optimal-quantifier-concatenation | require optimal quantifiers for concatenated quantifiers | :star::wrench: |
regexp/prefer-escape-replacement-dollar-char | enforces escape of replacement $ character ($$ ). | |
regexp/prefer-predefined-assertion | prefer predefined assertion over equivalent lookarounds | :star::wrench: |
regexp/prefer-quantifier | enforce using quantifier | :wrench: |
regexp/prefer-range | enforce using character class range | :star::wrench: |
regexp/prefer-regexp-exec | enforce that RegExp#exec is used instead of String#match if no global flag is provided | |
regexp/prefer-regexp-test | enforce that RegExp#test is used instead of String#match and RegExp#exec | :wrench: |
regexp/sort-alternatives | sort alternatives if order doesn't matter | :wrench: |
Rule ID | Description | |
---|---|---|
regexp/hexadecimal-escape | enforce consistent usage of hexadecimal escape | :wrench: |
regexp/letter-case | enforce into your favorite case | :wrench: |
regexp/match-any | enforce match any character style | :star::wrench: |
regexp/no-useless-escape | disallow unnecessary escape characters in RegExp | :star::wrench: |
regexp/no-useless-non-capturing-group | disallow unnecessary Non-capturing group | :star::wrench: |
regexp/prefer-character-class | enforce using character class | :star::wrench: |
regexp/prefer-d | enforce using \d | :star::wrench: |
regexp/prefer-named-backreference | enforce using named backreferences | :wrench: |
regexp/prefer-plus-quantifier | enforce using + quantifier | :star::wrench: |
regexp/prefer-question-quantifier | enforce using ? quantifier | :star::wrench: |
regexp/prefer-star-quantifier | enforce using * quantifier | :star::wrench: |
regexp/prefer-unicode-codepoint-escapes | enforce use of unicode codepoint escapes | :star::wrench: |
regexp/prefer-w | enforce using \w | :star::wrench: |
regexp/sort-character-class-elements | enforces elements order in character class | :wrench: |
regexp/sort-flags | require regex flags to be sorted | :star::wrench: |
regexp/unicode-escape | enforce consistent usage of unicode escape or unicode codepoint escape | :wrench: |
See Settings.
eslint-plugin-regexp follows Semantic Versioning and ESLint's Semantic Versioning Policy.
Welcome contributing!
Please use GitHub's Issues/PRs.
See CONTRIBUTING.md.
npm test
runs tests and measures coverage.npm run update
runs in order to update readme and recommended configuration.npm run new [new rule name]
runs to create the files needed for the new rule.npm run docs:watch
starts the website locally.See the LICENSE file for license rights and limitations (MIT).
FAQs
ESLint plugin for finding RegExp mistakes and RegExp style guide violations.
The npm package eslint-plugin-regexp receives a total of 631,516 weekly downloads. As such, eslint-plugin-regexp popularity was classified as popular.
We found that eslint-plugin-regexp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Libxml2’s solo maintainer drops embargoed security fixes, highlighting the burden on unpaid volunteers who keep critical open source software secure.
Research
Security News
Socket investigates hidden protestware in npm packages that blocks user interaction and plays the Ukrainian anthem for Russian-language visitors.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.