eslint-plugin-xss

eslint-plugin-xss copied to clipboard

Support ESLint 9.0.0

1

This plugin doesn't work with ESLint 9.0.0. @Rantanen Migration guide: https://eslint.org/blog/2023/11/whats-coming-in-eslint-9.0.0/

ghost

### 1. Summary eslint-plugin-xss returns errors, if I use JavaScript like this: ```js console.log(""); console.log(''); ``` It seems to me that the plugin shouldn’t return errors in such cases. ###...

Kristinita

Replacing the 'escape' function by encodeURI as the 'escape' function is now deprecated

leandro-lorenzini

Replace escape with encodeUri

1

As the `escape` function is deprecated, it should validate the code against `encodeUri` instead.

jz222

Allow the use of ```js window.location.href = url.toString(); ``` when `url` is an instance of [`URL`](https://developer.mozilla.org/en-US/docs/Web/API/URL) as encoding is already handled. See [URL Standard > 6.1 URL class](https://url.spec.whatwg.org/#url-class) See [URL...

gerarts

Add category to rules' meta objects

1

This PR adds category and description inside the meta object. I didn't have too much creativity for the `no-mixed-html` description. If you have better ideas let me know and I...

lolgab