| [9af201e] | 1 | /**
|
|---|
| 2 | * @fileoverview Rule to flag when using new Function
|
|---|
| 3 | * @author Ilya Volodin
|
|---|
| 4 | */
|
|---|
| 5 |
|
|---|
| 6 | "use strict";
|
|---|
| 7 |
|
|---|
| 8 | //------------------------------------------------------------------------------
|
|---|
| 9 | // Requirements
|
|---|
| 10 | //------------------------------------------------------------------------------
|
|---|
| 11 |
|
|---|
| 12 | const astUtils = require("./utils/ast-utils");
|
|---|
| 13 |
|
|---|
| 14 | //------------------------------------------------------------------------------
|
|---|
| 15 | // Helpers
|
|---|
| 16 | //------------------------------------------------------------------------------
|
|---|
| 17 |
|
|---|
| 18 | const callMethods = new Set(["apply", "bind", "call"]);
|
|---|
| 19 |
|
|---|
| 20 | //------------------------------------------------------------------------------
|
|---|
| 21 | // Rule Definition
|
|---|
| 22 | //------------------------------------------------------------------------------
|
|---|
| 23 |
|
|---|
| 24 | /** @type {import('../shared/types').Rule} */
|
|---|
| 25 | module.exports = {
|
|---|
| 26 | meta: {
|
|---|
| 27 | type: "suggestion",
|
|---|
| 28 |
|
|---|
| 29 | docs: {
|
|---|
| 30 | description: "Disallow `new` operators with the `Function` object",
|
|---|
| 31 | recommended: false,
|
|---|
| 32 | url: "https://eslint.org/docs/latest/rules/no-new-func"
|
|---|
| 33 | },
|
|---|
| 34 |
|
|---|
| 35 | schema: [],
|
|---|
| 36 |
|
|---|
| 37 | messages: {
|
|---|
| 38 | noFunctionConstructor: "The Function constructor is eval."
|
|---|
| 39 | }
|
|---|
| 40 | },
|
|---|
| 41 |
|
|---|
| 42 | create(context) {
|
|---|
| 43 | const sourceCode = context.sourceCode;
|
|---|
| 44 |
|
|---|
| 45 | return {
|
|---|
| 46 | "Program:exit"(node) {
|
|---|
| 47 | const globalScope = sourceCode.getScope(node);
|
|---|
| 48 | const variable = globalScope.set.get("Function");
|
|---|
| 49 |
|
|---|
| 50 | if (variable && variable.defs.length === 0) {
|
|---|
| 51 | variable.references.forEach(ref => {
|
|---|
| 52 | const idNode = ref.identifier;
|
|---|
| 53 | const { parent } = idNode;
|
|---|
| 54 | let evalNode;
|
|---|
| 55 |
|
|---|
| 56 | if (parent) {
|
|---|
| 57 | if (idNode === parent.callee && (
|
|---|
| 58 | parent.type === "NewExpression" ||
|
|---|
| 59 | parent.type === "CallExpression"
|
|---|
| 60 | )) {
|
|---|
| 61 | evalNode = parent;
|
|---|
| 62 | } else if (
|
|---|
| 63 | parent.type === "MemberExpression" &&
|
|---|
| 64 | idNode === parent.object &&
|
|---|
| 65 | callMethods.has(astUtils.getStaticPropertyName(parent))
|
|---|
| 66 | ) {
|
|---|
| 67 | const maybeCallee = parent.parent.type === "ChainExpression" ? parent.parent : parent;
|
|---|
| 68 |
|
|---|
| 69 | if (maybeCallee.parent.type === "CallExpression" && maybeCallee.parent.callee === maybeCallee) {
|
|---|
| 70 | evalNode = maybeCallee.parent;
|
|---|
| 71 | }
|
|---|
| 72 | }
|
|---|
| 73 | }
|
|---|
| 74 |
|
|---|
| 75 | if (evalNode) {
|
|---|
| 76 | context.report({
|
|---|
| 77 | node: evalNode,
|
|---|
| 78 | messageId: "noFunctionConstructor"
|
|---|
| 79 | });
|
|---|
| 80 | }
|
|---|
| 81 | });
|
|---|
| 82 | }
|
|---|
| 83 | }
|
|---|
| 84 | };
|
|---|
| 85 |
|
|---|
| 86 | }
|
|---|
| 87 | };
|
|---|