blob: 1f51f0ecd6f0e2c42ac22b8ff4f3e7cc2f5f2b40 [file] [log] [blame]
"use strict";
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
Object.defineProperty(exports, "__esModule", { value: true });
const ts = __importStar(require("typescript"));
const utils_1 = require("@typescript-eslint/utils");
const tsutils = __importStar(require("tsutils"));
const util = __importStar(require("../util"));
const FUNCTION_CONSTRUCTOR = 'Function';
const GLOBAL_CANDIDATES = new Set(['global', 'window', 'globalThis']);
const EVAL_LIKE_METHODS = new Set([
'setImmediate',
'setInterval',
'setTimeout',
'execScript',
]);
exports.default = util.createRule({
name: 'no-implied-eval',
meta: {
docs: {
description: 'Disallow the use of `eval()`-like methods',
recommended: 'error',
extendsBaseRule: true,
requiresTypeChecking: true,
},
messages: {
noImpliedEvalError: 'Implied eval. Consider passing a function.',
noFunctionConstructor: 'Implied eval. Do not use the Function constructor to create functions.',
},
schema: [],
type: 'suggestion',
},
defaultOptions: [],
create(context) {
const parserServices = util.getParserServices(context);
const program = parserServices.program;
const checker = parserServices.program.getTypeChecker();
function getCalleeName(node) {
if (node.type === utils_1.AST_NODE_TYPES.Identifier) {
return node.name;
}
if (node.type === utils_1.AST_NODE_TYPES.MemberExpression &&
node.object.type === utils_1.AST_NODE_TYPES.Identifier &&
GLOBAL_CANDIDATES.has(node.object.name)) {
if (node.property.type === utils_1.AST_NODE_TYPES.Identifier) {
return node.property.name;
}
if (node.property.type === utils_1.AST_NODE_TYPES.Literal &&
typeof node.property.value === 'string') {
return node.property.value;
}
}
return null;
}
function isFunctionType(node) {
var _a;
const tsNode = parserServices.esTreeNodeToTSNodeMap.get(node);
const type = checker.getTypeAtLocation(tsNode);
const symbol = type.getSymbol();
if (symbol &&
tsutils.isSymbolFlagSet(symbol, ts.SymbolFlags.Function | ts.SymbolFlags.Method)) {
return true;
}
if (symbol && symbol.escapedName === FUNCTION_CONSTRUCTOR) {
const declarations = (_a = symbol.getDeclarations()) !== null && _a !== void 0 ? _a : [];
for (const declaration of declarations) {
const sourceFile = declaration.getSourceFile();
if (program.isSourceFileDefaultLibrary(sourceFile)) {
return true;
}
}
}
const signatures = checker.getSignaturesOfType(type, ts.SignatureKind.Call);
return signatures.length > 0;
}
function isBind(node) {
return node.type === utils_1.AST_NODE_TYPES.MemberExpression
? isBind(node.property)
: node.type === utils_1.AST_NODE_TYPES.Identifier && node.name === 'bind';
}
function isFunction(node) {
switch (node.type) {
case utils_1.AST_NODE_TYPES.ArrowFunctionExpression:
case utils_1.AST_NODE_TYPES.FunctionDeclaration:
case utils_1.AST_NODE_TYPES.FunctionExpression:
return true;
case utils_1.AST_NODE_TYPES.Literal:
case utils_1.AST_NODE_TYPES.TemplateLiteral:
return false;
case utils_1.AST_NODE_TYPES.CallExpression:
return isBind(node.callee) || isFunctionType(node);
default:
return isFunctionType(node);
}
}
function isReferenceToGlobalFunction(calleeName) {
const ref = context
.getScope()
.references.find(ref => ref.identifier.name === calleeName);
// ensure it's the "global" version
return !(ref === null || ref === void 0 ? void 0 : ref.resolved) || ref.resolved.defs.length === 0;
}
function checkImpliedEval(node) {
var _a;
const calleeName = getCalleeName(node.callee);
if (calleeName === null) {
return;
}
if (calleeName === FUNCTION_CONSTRUCTOR) {
const tsNode = parserServices.esTreeNodeToTSNodeMap.get(node.callee);
const type = checker.getTypeAtLocation(tsNode);
const symbol = type.getSymbol();
if (symbol) {
const declarations = (_a = symbol.getDeclarations()) !== null && _a !== void 0 ? _a : [];
for (const declaration of declarations) {
const sourceFile = declaration.getSourceFile();
if (program.isSourceFileDefaultLibrary(sourceFile)) {
context.report({ node, messageId: 'noFunctionConstructor' });
return;
}
}
}
else {
context.report({ node, messageId: 'noFunctionConstructor' });
return;
}
}
if (node.arguments.length === 0) {
return;
}
const [handler] = node.arguments;
if (EVAL_LIKE_METHODS.has(calleeName) &&
!isFunction(handler) &&
isReferenceToGlobalFunction(calleeName)) {
context.report({ node: handler, messageId: 'noImpliedEvalError' });
}
}
return {
NewExpression: checkImpliedEval,
CallExpression: checkImpliedEval,
};
},
});
//# sourceMappingURL=no-implied-eval.js.map