We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2599d2a commit 4ba1cbaCopy full SHA for 4ba1cba
lib/rules/no-inner-html.js
@@ -11,17 +11,17 @@ module.exports = {
11
create(context) {
12
return {
13
AssignmentExpression(node) {
14
- if (node.operator === "=") {
15
- const leftNode = node.left;
16
- const rightNode = node.right;
+ if (node.operator === '=') {
+ const leftNode = node.left
+ const rightNode = node.right
17
18
if (leftNode.property && leftNode.property.name === 'innerHTML') {
19
if (rightNode.type === 'Literal' && rightNode.value === '') {
20
return
21
}
22
23
context.report({
24
- node: node,
+ node,
25
message:
26
'Using innerHTML poses a potential security risk and should not be used other than cleaning content.'
27
})
0 commit comments