
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
remark-lint-prohibited-strings
Advanced tools
A remark-lint plugin to prohibit specified strings in markdown files. It can be used to lint consistent spelling, abbreviations, or syntax within the text of markdown files (e.g. it will not lint code blocks).
Example configuration:
{
"plugins": [
"remark-lint-prohibited-strings",
[
{ no: "End-Of-Life", yes: "End-of-Life" },
{ no: "End-of-life", yes: "End-of-Life" },
{ no: 'gatsby', yes: "Gatsby", ignoreNextTo: "-" },
{ no: 'sales', yes: "Sales", ignoreNextTo: [ "-", "\'", "'" ] },
{ no: "Github", yes: "GitHub" },
{ no: "Javascript", yes: "JavaScript" },
{ no: "Node.JS", yes: "Node.js" },
{ no: "[Rr][Ff][Cc](\\d+)", yes: "RFC $1", replaceCaptureGroups: true },
{ no: "v8", yes: "V8" },
{ yes: 'Unix' }
]
]
}
string
, optional
Specifies the string you wish to prohibit. Regular expressions are respected, but can only be supplied as a string. If no
is provided, the value must be a string, and the match is case-sensitive. If omitted, then the no
string will default to be the case-insensitive match of yes
. For example, in the configuration above, users will be told to use "Unix" instead of "unix", or "UNIX".
string
, optional
Specifies what users will be told to use instead of the matched no
value (if provided). For example, in the configuration above, users will be told to use "GitHub" instead of "Github".
string
| string []
, optional
Makes a prohibited string allowable if it appears next to that string. It is interpreted as a literal sequence of character(s) that appear immediately before or after the yes
text. For example, in the configuration above, users will be told to use "Gatsby" instead of "gatsby". However, "gatsby-plugin" and "node-gatsby" will not be flagged because '-'
is included in ignoreNextTo
for that rule.
As an array of strings, the items are combined into a regex OR condition to match a number of possible sequences of characters that might appear immediately before or after the yes
text. In the configuration above, the linter will instruct the user to use "Sales" instead of "sales", but it will ignore "pre-sales", 'sales'
, and "sales"
(within quotes).
boolean
, optional
Defaults to false
. If set to a truthy value, it enables replacement of regular expression capture groups, that are matched in the no
regular expression, with group placeholders in yes
. It can be used to provide better linting messages. The message reported to the user will use the same process as the the replacement string in String.prototype.replace(). For example, in the configuration above, users will be told to use "RFC 123" instead of "rfc123", "RFC123", or "Rfc123".
FAQs
Check for prohibited strings
We found that remark-lint-prohibited-strings demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.