mark cityssm.escapeHTML as a sanitizer

cityssm · Apr 30, 2024 · 2fd1b74 · 2fd1b74
1 parent 689ce4a
commit 2fd1b74
Show file tree

Hide file tree

Showing 4 changed files with 52 additions and 1 deletion.
diff --git a/eslint-config-cityssm.js b/eslint-config-cityssm.js
@@ -73,6 +73,22 @@ module.exports = {
         'n/no-missing-import': 'off',
         'no-extra-semi': 'off',
         'no-secrets/no-secrets': 'error',
+        'no-unsanitized/method': [
+            'error',
+            {
+                escape: {
+                    methods: ['cityssm.escapeHTML']
+                }
+            }
+        ],
+        'no-unsanitized/property': [
+            'error',
+            {
+                escape: {
+                    methods: ['cityssm.escapeHTML']
+                }
+            }
+        ],
         'sonarjs/cognitive-complexity': ['warn', 20],
         'sonarjs/no-duplicate-string': 'warn',
         'sort-imports': [

diff --git a/eslint-config-cityssm.ts b/eslint-config-cityssm.ts
@@ -79,6 +79,24 @@ module.exports = {
     'no-extra-semi': 'off',
     'no-secrets/no-secrets': 'error',
 
+    'no-unsanitized/method': [
+      'error',
+      {
+        escape: {
+          methods: ['cityssm.escapeHTML']
+        }
+      }
+    ],
+
+    'no-unsanitized/property': [
+      'error',
+      {
+        escape: {
+          methods: ['cityssm.escapeHTML']
+        }
+      }
+    ],
+
     'sonarjs/cognitive-complexity': ['warn', 20],
     'sonarjs/no-duplicate-string': 'warn',
 

diff --git a/samples/browserTest.js b/samples/browserTest.js
@@ -1 +1,7 @@
 document.getElementById('#test').innerHTML = document.getElementsByClassName('input')[0].value;
+document.getElementById('#test').innerHTML = cityssm.escapeHTML(document.getElementsByClassName('input')[0].value);
+document.getElementById('#test').innerHTML = `<p>
+${cityssm.escapeHTML(document.getElementsByClassName('input')[0].value)}
+</p>`;
+var text = document.getElementsByTagName('p')[2].textContent;
+document.getElementById('#test').insertAdjacentHTML('beforeend', text);
diff --git a/samples/browserTest.ts b/samples/browserTest.ts
@@ -1 +1,12 @@
-document.getElementById('#test')!.innerHTML = document.getElementsByClassName('input')[0].value
+document.getElementById('#test')!.innerHTML = document.getElementsByClassName('input')[0].value
+
+ document.getElementById('#test')!.innerHTML = cityssm.escapeHTML(document.getElementsByClassName('input')[0].value)
+
+
+document.getElementById('#test')!.innerHTML = `<p>
+${cityssm.escapeHTML(document.getElementsByClassName('input')[0].value})}
+</p>`
+
+var text = document.getElementsByTagName('p')[2].textContent
+
+document.getElementById('#test')!.insertAdjacentHTML('beforeend', text)