[d565449] | 1 | /**
|
---|
| 2 | * @fileoverview Rule to flag when using new Function
|
---|
| 3 | * @author Ilya Volodin
|
---|
| 4 | */
|
---|
| 5 |
|
---|
| 6 | "use strict";
|
---|
| 7 |
|
---|
| 8 | //------------------------------------------------------------------------------
|
---|
| 9 | // Requirements
|
---|
| 10 | //------------------------------------------------------------------------------
|
---|
| 11 |
|
---|
| 12 | const astUtils = require("./utils/ast-utils");
|
---|
| 13 |
|
---|
| 14 | //------------------------------------------------------------------------------
|
---|
| 15 | // Helpers
|
---|
| 16 | //------------------------------------------------------------------------------
|
---|
| 17 |
|
---|
| 18 | const callMethods = new Set(["apply", "bind", "call"]);
|
---|
| 19 |
|
---|
| 20 | //------------------------------------------------------------------------------
|
---|
| 21 | // Rule Definition
|
---|
| 22 | //------------------------------------------------------------------------------
|
---|
| 23 |
|
---|
| 24 | /** @type {import('../shared/types').Rule} */
|
---|
| 25 | module.exports = {
|
---|
| 26 | meta: {
|
---|
| 27 | type: "suggestion",
|
---|
| 28 |
|
---|
| 29 | docs: {
|
---|
| 30 | description: "Disallow `new` operators with the `Function` object",
|
---|
| 31 | recommended: false,
|
---|
| 32 | url: "https://eslint.org/docs/latest/rules/no-new-func"
|
---|
| 33 | },
|
---|
| 34 |
|
---|
| 35 | schema: [],
|
---|
| 36 |
|
---|
| 37 | messages: {
|
---|
| 38 | noFunctionConstructor: "The Function constructor is eval."
|
---|
| 39 | }
|
---|
| 40 | },
|
---|
| 41 |
|
---|
| 42 | create(context) {
|
---|
| 43 | const sourceCode = context.sourceCode;
|
---|
| 44 |
|
---|
| 45 | return {
|
---|
| 46 | "Program:exit"(node) {
|
---|
| 47 | const globalScope = sourceCode.getScope(node);
|
---|
| 48 | const variable = globalScope.set.get("Function");
|
---|
| 49 |
|
---|
| 50 | if (variable && variable.defs.length === 0) {
|
---|
| 51 | variable.references.forEach(ref => {
|
---|
| 52 | const idNode = ref.identifier;
|
---|
| 53 | const { parent } = idNode;
|
---|
| 54 | let evalNode;
|
---|
| 55 |
|
---|
| 56 | if (parent) {
|
---|
| 57 | if (idNode === parent.callee && (
|
---|
| 58 | parent.type === "NewExpression" ||
|
---|
| 59 | parent.type === "CallExpression"
|
---|
| 60 | )) {
|
---|
| 61 | evalNode = parent;
|
---|
| 62 | } else if (
|
---|
| 63 | parent.type === "MemberExpression" &&
|
---|
| 64 | idNode === parent.object &&
|
---|
| 65 | callMethods.has(astUtils.getStaticPropertyName(parent))
|
---|
| 66 | ) {
|
---|
| 67 | const maybeCallee = parent.parent.type === "ChainExpression" ? parent.parent : parent;
|
---|
| 68 |
|
---|
| 69 | if (maybeCallee.parent.type === "CallExpression" && maybeCallee.parent.callee === maybeCallee) {
|
---|
| 70 | evalNode = maybeCallee.parent;
|
---|
| 71 | }
|
---|
| 72 | }
|
---|
| 73 | }
|
---|
| 74 |
|
---|
| 75 | if (evalNode) {
|
---|
| 76 | context.report({
|
---|
| 77 | node: evalNode,
|
---|
| 78 | messageId: "noFunctionConstructor"
|
---|
| 79 | });
|
---|
| 80 | }
|
---|
| 81 | });
|
---|
| 82 | }
|
---|
| 83 | }
|
---|
| 84 | };
|
---|
| 85 |
|
---|
| 86 | }
|
---|
| 87 | };
|
---|