CFLint icon indicating copy to clipboard operation
CFLint copied to clipboard

Static code analysis for CFML (a linter)

Results 108 CFLint issues
Sort by recently updated
recently updated
newest added

v1.5 (via commandbox-cflint, v2.3) Here's [a gist with a function defined via `` tags with a CFScript body that is 101 lines long](https://gist.github.com/adamcameron/4b5b61e93cd6d9fba255359f99ff1f55). I am using this `.cflintrc` file, in...

Lucee allows the ability to have static functions in components, i.e. calling a function without having to instantiate the Component itself (see https://docs.lucee.org/guides/cookbooks/StaticScope.html ) The syntax breaks CFLint parsing and...

enhancement

Bumps commons-io from 2.5 to 2.7. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-io:commons-io&package-manager=maven&previous-version=2.5&new-version=2.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

Hello I have some error when I Try to check directory: `java -jar c:\temp\cflint-1.5.0-all.jar -folder c:\repo\fork\ -quiet -text -stdout` `java.lang.ClassCastException: cfml.parsing.cfscript.CFFunctionExpression cannot be cast to cfml.parsing.cfscript.CFIdentifier at cfml.parsing.cfscript.CFFullVarExpression.getIdentifier(CFFullVarExpression.java:31) at com.cflint.plugins.core.ArgVarChecker.expression(ArgVarChecker.java:32)...

Bumps `jackson.version` from 2.10.1 to 2.12.1. Updates `jackson-core` from 2.10.1 to 2.12.1 Commits 67a2970 [maven-release-plugin] prepare release jackson-core-2.12.1 2649dd4 Prepare for 2.12.1 release 1e30c8c ... aa54f0a javadocs, javadocs e5cbda2 More...

dependencies

Bumps ant from 1.7.0 to 1.10.9. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.ant:ant&package-manager=maven&previous-version=1.7.0&new-version=1.10.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

In the example below, the rule alerts as expected for the variable `test` but does not for the variable `theCfc` inside the closure. Is this behaving as expected? ![Snag_13774364](https://user-images.githubusercontent.com/168185/103394811-4bd83880-4af0-11eb-8f50-808fe77f3881.png)

bug

MISSING_VAR does not account for declaration being in a separate branch. ``` ``` In the above example, the rule only reports `theVal` in the first branch. It should report the...

bug

This code works fine in Lucee, but the linter can't parse it. foo.cfc: ```coldfusion-cfc component { public struct function foo () localmode='modern' { if (['ach', 'wire'].find(form.payment_method)) { param name="form.confirmation_number" type="string";...

bug