You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
86 lines
2.9 KiB
86 lines
2.9 KiB
/** |
|
* @fileoverview Rule to flag when using new Function |
|
* @author Ilya Volodin |
|
*/ |
|
|
|
"use strict"; |
|
|
|
//------------------------------------------------------------------------------ |
|
// Requirements |
|
//------------------------------------------------------------------------------ |
|
|
|
const astUtils = require("./utils/ast-utils"); |
|
|
|
//------------------------------------------------------------------------------ |
|
// Helpers |
|
//------------------------------------------------------------------------------ |
|
|
|
const callMethods = new Set(["apply", "bind", "call"]); |
|
|
|
//------------------------------------------------------------------------------ |
|
// Rule Definition |
|
//------------------------------------------------------------------------------ |
|
|
|
/** @type {import('../shared/types').Rule} */ |
|
module.exports = { |
|
meta: { |
|
type: "suggestion", |
|
|
|
docs: { |
|
description: "Disallow `new` operators with the `Function` object", |
|
recommended: false, |
|
url: "https://eslint.org/docs/rules/no-new-func" |
|
}, |
|
|
|
schema: [], |
|
|
|
messages: { |
|
noFunctionConstructor: "The Function constructor is eval." |
|
} |
|
}, |
|
|
|
create(context) { |
|
|
|
return { |
|
"Program:exit"() { |
|
const globalScope = context.getScope(); |
|
const variable = globalScope.set.get("Function"); |
|
|
|
if (variable && variable.defs.length === 0) { |
|
variable.references.forEach(ref => { |
|
const node = ref.identifier; |
|
const { parent } = node; |
|
let evalNode; |
|
|
|
if (parent) { |
|
if (node === parent.callee && ( |
|
parent.type === "NewExpression" || |
|
parent.type === "CallExpression" |
|
)) { |
|
evalNode = parent; |
|
} else if ( |
|
parent.type === "MemberExpression" && |
|
node === parent.object && |
|
callMethods.has(astUtils.getStaticPropertyName(parent)) |
|
) { |
|
const maybeCallee = parent.parent.type === "ChainExpression" ? parent.parent : parent; |
|
|
|
if (maybeCallee.parent.type === "CallExpression" && maybeCallee.parent.callee === maybeCallee) { |
|
evalNode = maybeCallee.parent; |
|
} |
|
} |
|
} |
|
|
|
if (evalNode) { |
|
context.report({ |
|
node: evalNode, |
|
messageId: "noFunctionConstructor" |
|
}); |
|
} |
|
}); |
|
} |
|
} |
|
}; |
|
|
|
} |
|
};
|
|
|