
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
stylelint-selector-tag-no-without-class
Advanced tools
Styelint plugin to disallow certain tags without a qualifying classname in selectors
A stylelint plugin to disallow certain tags without a class qualifier in selectors.
For example, if this rule is configured for (only) the <div>
tag, the following patterns are considered violations:
div {}
.foo div {}
div .foo {}
div, .bar {}
div:hover {}
The following patterns are not considered violations:
div.foo {} /* (tag is qualified with a class) */
a {} /* (rule not configured for '<a>' tag) */
According to the HTML specification, tags like <div>
and <span>
do no inherently represent anything. It would therefore be strange to attach styling to such a generic container, even within a given context. We believe that tags like <div>
and <span>
should only have meaning (and thus receive corresponding style rules) when they have a class as an additional qualifier.
Install this package as a development dependency using NPM:
npm install --save-dev stylelint-selector-tag-no-without-class
Add the plugin and the corresponding rule to the stylelint configuration file, and configure the tags that should not be used as a selector without a qualifying classname:
// .stylelintrc
{
"plugins": [
"stylelint-selector-tag-no-without-class"
],
"rules": {
"plugin/selector-tag-no-without-class": ["div", "span"]
}
}
array|string
: ["array", "of", "tags", "or", "/regexes/"]|"tag"|"/regex/"
Specification of tags that should not occur without a class qualifier. If a string is surrounded with "/"
, it is interpreted as a regular expression. For example, "^/h\d+$/"
disallows using any section heading without a class qualifier.
This project adheres to Semantic Versioning. A list of notable changes for each release can be found in the changelog.
This plugin is released under the MIT license.
FAQs
Styelint plugin to disallow certain tags without a qualifying classname in selectors
We found that stylelint-selector-tag-no-without-class demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.