build: update npm install command to use --legacy-peer-deps
This change modifies the build scripts to use --legacy-peer-deps flag when installing npm dependencies to resolve potential peer dependency conflicts during the build process. The change is applied to both bash (build.sh) and batch (build.bat) build scripts.
This commit is contained in:
Luiz Costa
+215
-224
@@ -16,9 +16,9 @@ const astUtils = require("./utils/ast-utils");
|
||||
//------------------------------------------------------------------------------
|
||||
|
||||
const candidatesOfGlobalObject = Object.freeze([
|
||||
"global",
|
||||
"window",
|
||||
"globalThis",
|
||||
"global",
|
||||
"window",
|
||||
"globalThis"
|
||||
]);
|
||||
|
||||
/**
|
||||
@@ -30,266 +30,257 @@ const candidatesOfGlobalObject = Object.freeze([
|
||||
* the specified name's property
|
||||
*/
|
||||
function isMember(node, name) {
|
||||
return astUtils.isSpecificMemberAccess(node, null, name);
|
||||
return astUtils.isSpecificMemberAccess(node, null, name);
|
||||
}
|
||||
|
||||
//------------------------------------------------------------------------------
|
||||
// Rule Definition
|
||||
//------------------------------------------------------------------------------
|
||||
|
||||
/** @type {import('../types').Rule.RuleModule} */
|
||||
/** @type {import('../shared/types').Rule} */
|
||||
module.exports = {
|
||||
meta: {
|
||||
type: "suggestion",
|
||||
meta: {
|
||||
type: "suggestion",
|
||||
|
||||
defaultOptions: [
|
||||
{
|
||||
allowIndirect: false,
|
||||
},
|
||||
],
|
||||
docs: {
|
||||
description: "Disallow the use of `eval()`",
|
||||
recommended: false,
|
||||
url: "https://eslint.org/docs/latest/rules/no-eval"
|
||||
},
|
||||
|
||||
docs: {
|
||||
description: "Disallow the use of `eval()`",
|
||||
recommended: false,
|
||||
url: "https://eslint.org/docs/latest/rules/no-eval",
|
||||
},
|
||||
schema: [
|
||||
{
|
||||
type: "object",
|
||||
properties: {
|
||||
allowIndirect: { type: "boolean", default: false }
|
||||
},
|
||||
additionalProperties: false
|
||||
}
|
||||
],
|
||||
|
||||
schema: [
|
||||
{
|
||||
type: "object",
|
||||
properties: {
|
||||
allowIndirect: { type: "boolean" },
|
||||
},
|
||||
additionalProperties: false,
|
||||
},
|
||||
],
|
||||
messages: {
|
||||
unexpected: "eval can be harmful."
|
||||
}
|
||||
},
|
||||
|
||||
messages: {
|
||||
unexpected: "eval can be harmful.",
|
||||
},
|
||||
},
|
||||
create(context) {
|
||||
const allowIndirect = Boolean(
|
||||
context.options[0] &&
|
||||
context.options[0].allowIndirect
|
||||
);
|
||||
const sourceCode = context.sourceCode;
|
||||
let funcInfo = null;
|
||||
|
||||
create(context) {
|
||||
const [{ allowIndirect }] = context.options;
|
||||
const sourceCode = context.sourceCode;
|
||||
let funcInfo = null;
|
||||
/**
|
||||
* Pushes a `this` scope (non-arrow function, class static block, or class field initializer) information to the stack.
|
||||
* Top-level scopes are handled separately.
|
||||
*
|
||||
* This is used in order to check whether or not `this` binding is a
|
||||
* reference to the global object.
|
||||
* @param {ASTNode} node A node of the scope.
|
||||
* For functions, this is one of FunctionDeclaration, FunctionExpression.
|
||||
* For class static blocks, this is StaticBlock.
|
||||
* For class field initializers, this can be any node that is PropertyDefinition#value.
|
||||
* @returns {void}
|
||||
*/
|
||||
function enterThisScope(node) {
|
||||
const strict = sourceCode.getScope(node).isStrict;
|
||||
|
||||
/**
|
||||
* Pushes a `this` scope (non-arrow function, class static block, or class field initializer) information to the stack.
|
||||
* Top-level scopes are handled separately.
|
||||
*
|
||||
* This is used in order to check whether or not `this` binding is a
|
||||
* reference to the global object.
|
||||
* @param {ASTNode} node A node of the scope.
|
||||
* For functions, this is one of FunctionDeclaration, FunctionExpression.
|
||||
* For class static blocks, this is StaticBlock.
|
||||
* For class field initializers, this can be any node that is PropertyDefinition#value.
|
||||
* @returns {void}
|
||||
*/
|
||||
function enterThisScope(node) {
|
||||
const strict = sourceCode.getScope(node).isStrict;
|
||||
funcInfo = {
|
||||
upper: funcInfo,
|
||||
node,
|
||||
strict,
|
||||
isTopLevelOfScript: false,
|
||||
defaultThis: false,
|
||||
initialized: strict
|
||||
};
|
||||
}
|
||||
|
||||
funcInfo = {
|
||||
upper: funcInfo,
|
||||
node,
|
||||
strict,
|
||||
isTopLevelOfScript: false,
|
||||
defaultThis: false,
|
||||
initialized: strict,
|
||||
};
|
||||
}
|
||||
/**
|
||||
* Pops a variable scope from the stack.
|
||||
* @returns {void}
|
||||
*/
|
||||
function exitThisScope() {
|
||||
funcInfo = funcInfo.upper;
|
||||
}
|
||||
|
||||
/**
|
||||
* Pops a variable scope from the stack.
|
||||
* @returns {void}
|
||||
*/
|
||||
function exitThisScope() {
|
||||
funcInfo = funcInfo.upper;
|
||||
}
|
||||
/**
|
||||
* Reports a given node.
|
||||
*
|
||||
* `node` is `Identifier` or `MemberExpression`.
|
||||
* The parent of `node` might be `CallExpression`.
|
||||
*
|
||||
* The location of the report is always `eval` `Identifier` (or possibly
|
||||
* `Literal`). The type of the report is `CallExpression` if the parent is
|
||||
* `CallExpression`. Otherwise, it's the given node type.
|
||||
* @param {ASTNode} node A node to report.
|
||||
* @returns {void}
|
||||
*/
|
||||
function report(node) {
|
||||
const parent = node.parent;
|
||||
const locationNode = node.type === "MemberExpression"
|
||||
? node.property
|
||||
: node;
|
||||
|
||||
/**
|
||||
* Reports a given node.
|
||||
*
|
||||
* `node` is `Identifier` or `MemberExpression`.
|
||||
* The parent of `node` might be `CallExpression`.
|
||||
*
|
||||
* The location of the report is always `eval` `Identifier` (or possibly
|
||||
* `Literal`). The type of the report is `CallExpression` if the parent is
|
||||
* `CallExpression`. Otherwise, it's the given node type.
|
||||
* @param {ASTNode} node A node to report.
|
||||
* @returns {void}
|
||||
*/
|
||||
function report(node) {
|
||||
const parent = node.parent;
|
||||
const locationNode =
|
||||
node.type === "MemberExpression" ? node.property : node;
|
||||
const reportNode = parent.type === "CallExpression" && parent.callee === node
|
||||
? parent
|
||||
: node;
|
||||
|
||||
const reportNode =
|
||||
parent.type === "CallExpression" && parent.callee === node
|
||||
? parent
|
||||
: node;
|
||||
context.report({
|
||||
node: reportNode,
|
||||
loc: locationNode.loc,
|
||||
messageId: "unexpected"
|
||||
});
|
||||
}
|
||||
|
||||
context.report({
|
||||
node: reportNode,
|
||||
loc: locationNode.loc,
|
||||
messageId: "unexpected",
|
||||
});
|
||||
}
|
||||
/**
|
||||
* Reports accesses of `eval` via the global object.
|
||||
* @param {eslint-scope.Scope} globalScope The global scope.
|
||||
* @returns {void}
|
||||
*/
|
||||
function reportAccessingEvalViaGlobalObject(globalScope) {
|
||||
for (let i = 0; i < candidatesOfGlobalObject.length; ++i) {
|
||||
const name = candidatesOfGlobalObject[i];
|
||||
const variable = astUtils.getVariableByName(globalScope, name);
|
||||
|
||||
/**
|
||||
* Reports accesses of `eval` via the global object.
|
||||
* @param {eslint-scope.Scope} globalScope The global scope.
|
||||
* @returns {void}
|
||||
*/
|
||||
function reportAccessingEvalViaGlobalObject(globalScope) {
|
||||
for (let i = 0; i < candidatesOfGlobalObject.length; ++i) {
|
||||
const name = candidatesOfGlobalObject[i];
|
||||
const variable = astUtils.getVariableByName(globalScope, name);
|
||||
if (!variable) {
|
||||
continue;
|
||||
}
|
||||
|
||||
if (!variable) {
|
||||
continue;
|
||||
}
|
||||
const references = variable.references;
|
||||
|
||||
const references = variable.references;
|
||||
for (let j = 0; j < references.length; ++j) {
|
||||
const identifier = references[j].identifier;
|
||||
let node = identifier.parent;
|
||||
|
||||
for (let j = 0; j < references.length; ++j) {
|
||||
const identifier = references[j].identifier;
|
||||
let node = identifier.parent;
|
||||
// To detect code like `window.window.eval`.
|
||||
while (isMember(node, name)) {
|
||||
node = node.parent;
|
||||
}
|
||||
|
||||
// To detect code like `window.window.eval`.
|
||||
while (isMember(node, name)) {
|
||||
node = node.parent;
|
||||
}
|
||||
// Reports.
|
||||
if (isMember(node, "eval")) {
|
||||
report(node);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Reports.
|
||||
if (isMember(node, "eval")) {
|
||||
report(node);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
/**
|
||||
* Reports all accesses of `eval` (excludes direct calls to eval).
|
||||
* @param {eslint-scope.Scope} globalScope The global scope.
|
||||
* @returns {void}
|
||||
*/
|
||||
function reportAccessingEval(globalScope) {
|
||||
const variable = astUtils.getVariableByName(globalScope, "eval");
|
||||
|
||||
/**
|
||||
* Reports all accesses of `eval` (excludes direct calls to eval).
|
||||
* @param {eslint-scope.Scope} globalScope The global scope.
|
||||
* @returns {void}
|
||||
*/
|
||||
function reportAccessingEval(globalScope) {
|
||||
const variable = astUtils.getVariableByName(globalScope, "eval");
|
||||
if (!variable) {
|
||||
return;
|
||||
}
|
||||
|
||||
if (!variable) {
|
||||
return;
|
||||
}
|
||||
const references = variable.references;
|
||||
|
||||
const references = variable.references;
|
||||
for (let i = 0; i < references.length; ++i) {
|
||||
const reference = references[i];
|
||||
const id = reference.identifier;
|
||||
|
||||
for (let i = 0; i < references.length; ++i) {
|
||||
const reference = references[i];
|
||||
const id = reference.identifier;
|
||||
if (id.name === "eval" && !astUtils.isCallee(id)) {
|
||||
|
||||
if (id.name === "eval" && !astUtils.isCallee(id)) {
|
||||
// Is accessing to eval (excludes direct calls to eval)
|
||||
report(id);
|
||||
}
|
||||
}
|
||||
}
|
||||
// Is accessing to eval (excludes direct calls to eval)
|
||||
report(id);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (allowIndirect) {
|
||||
// Checks only direct calls to eval. It's simple!
|
||||
return {
|
||||
"CallExpression:exit"(node) {
|
||||
const callee = node.callee;
|
||||
if (allowIndirect) {
|
||||
|
||||
/*
|
||||
* Optional call (`eval?.("code")`) is not direct eval.
|
||||
* The direct eval is only step 6.a.vi of https://tc39.es/ecma262/#sec-function-calls-runtime-semantics-evaluation
|
||||
* But the optional call is https://tc39.es/ecma262/#sec-optional-chaining-chain-evaluation
|
||||
*/
|
||||
if (
|
||||
!node.optional &&
|
||||
astUtils.isSpecificId(callee, "eval")
|
||||
) {
|
||||
report(callee);
|
||||
}
|
||||
},
|
||||
};
|
||||
}
|
||||
// Checks only direct calls to eval. It's simple!
|
||||
return {
|
||||
"CallExpression:exit"(node) {
|
||||
const callee = node.callee;
|
||||
|
||||
return {
|
||||
"CallExpression:exit"(node) {
|
||||
const callee = node.callee;
|
||||
/*
|
||||
* Optional call (`eval?.("code")`) is not direct eval.
|
||||
* The direct eval is only step 6.a.vi of https://tc39.es/ecma262/#sec-function-calls-runtime-semantics-evaluation
|
||||
* But the optional call is https://tc39.es/ecma262/#sec-optional-chaining-chain-evaluation
|
||||
*/
|
||||
if (!node.optional && astUtils.isSpecificId(callee, "eval")) {
|
||||
report(callee);
|
||||
}
|
||||
}
|
||||
};
|
||||
}
|
||||
|
||||
if (astUtils.isSpecificId(callee, "eval")) {
|
||||
report(callee);
|
||||
}
|
||||
},
|
||||
return {
|
||||
"CallExpression:exit"(node) {
|
||||
const callee = node.callee;
|
||||
|
||||
Program(node) {
|
||||
const scope = sourceCode.getScope(node),
|
||||
features =
|
||||
context.languageOptions.parserOptions.ecmaFeatures ||
|
||||
{},
|
||||
strict =
|
||||
scope.isStrict ||
|
||||
node.sourceType === "module" ||
|
||||
(features.globalReturn &&
|
||||
scope.childScopes[0].isStrict),
|
||||
isTopLevelOfScript =
|
||||
node.sourceType !== "module" && !features.globalReturn;
|
||||
if (astUtils.isSpecificId(callee, "eval")) {
|
||||
report(callee);
|
||||
}
|
||||
},
|
||||
|
||||
funcInfo = {
|
||||
upper: null,
|
||||
node,
|
||||
strict,
|
||||
isTopLevelOfScript,
|
||||
defaultThis: true,
|
||||
initialized: true,
|
||||
};
|
||||
},
|
||||
Program(node) {
|
||||
const scope = sourceCode.getScope(node),
|
||||
features = context.parserOptions.ecmaFeatures || {},
|
||||
strict =
|
||||
scope.isStrict ||
|
||||
node.sourceType === "module" ||
|
||||
(features.globalReturn && scope.childScopes[0].isStrict),
|
||||
isTopLevelOfScript = node.sourceType !== "module" && !features.globalReturn;
|
||||
|
||||
"Program:exit"(node) {
|
||||
const globalScope = sourceCode.getScope(node);
|
||||
funcInfo = {
|
||||
upper: null,
|
||||
node,
|
||||
strict,
|
||||
isTopLevelOfScript,
|
||||
defaultThis: true,
|
||||
initialized: true
|
||||
};
|
||||
},
|
||||
|
||||
exitThisScope();
|
||||
reportAccessingEval(globalScope);
|
||||
reportAccessingEvalViaGlobalObject(globalScope);
|
||||
},
|
||||
"Program:exit"(node) {
|
||||
const globalScope = sourceCode.getScope(node);
|
||||
|
||||
FunctionDeclaration: enterThisScope,
|
||||
"FunctionDeclaration:exit": exitThisScope,
|
||||
FunctionExpression: enterThisScope,
|
||||
"FunctionExpression:exit": exitThisScope,
|
||||
"PropertyDefinition > *.value": enterThisScope,
|
||||
"PropertyDefinition > *.value:exit": exitThisScope,
|
||||
StaticBlock: enterThisScope,
|
||||
"StaticBlock:exit": exitThisScope,
|
||||
exitThisScope();
|
||||
reportAccessingEval(globalScope);
|
||||
reportAccessingEvalViaGlobalObject(globalScope);
|
||||
},
|
||||
|
||||
ThisExpression(node) {
|
||||
if (!isMember(node.parent, "eval")) {
|
||||
return;
|
||||
}
|
||||
FunctionDeclaration: enterThisScope,
|
||||
"FunctionDeclaration:exit": exitThisScope,
|
||||
FunctionExpression: enterThisScope,
|
||||
"FunctionExpression:exit": exitThisScope,
|
||||
"PropertyDefinition > *.value": enterThisScope,
|
||||
"PropertyDefinition > *.value:exit": exitThisScope,
|
||||
StaticBlock: enterThisScope,
|
||||
"StaticBlock:exit": exitThisScope,
|
||||
|
||||
/*
|
||||
* `this.eval` is found.
|
||||
* Checks whether or not the value of `this` is the global object.
|
||||
*/
|
||||
if (!funcInfo.initialized) {
|
||||
funcInfo.initialized = true;
|
||||
funcInfo.defaultThis = astUtils.isDefaultThisBinding(
|
||||
funcInfo.node,
|
||||
sourceCode,
|
||||
);
|
||||
}
|
||||
ThisExpression(node) {
|
||||
if (!isMember(node.parent, "eval")) {
|
||||
return;
|
||||
}
|
||||
|
||||
// `this` at the top level of scripts always refers to the global object
|
||||
if (
|
||||
funcInfo.isTopLevelOfScript ||
|
||||
(!funcInfo.strict && funcInfo.defaultThis)
|
||||
) {
|
||||
// `this.eval` is possible built-in `eval`.
|
||||
report(node.parent);
|
||||
}
|
||||
},
|
||||
};
|
||||
},
|
||||
/*
|
||||
* `this.eval` is found.
|
||||
* Checks whether or not the value of `this` is the global object.
|
||||
*/
|
||||
if (!funcInfo.initialized) {
|
||||
funcInfo.initialized = true;
|
||||
funcInfo.defaultThis = astUtils.isDefaultThisBinding(
|
||||
funcInfo.node,
|
||||
sourceCode
|
||||
);
|
||||
}
|
||||
|
||||
// `this` at the top level of scripts always refers to the global object
|
||||
if (funcInfo.isTopLevelOfScript || (!funcInfo.strict && funcInfo.defaultThis)) {
|
||||
|
||||
// `this.eval` is possible built-in `eval`.
|
||||
report(node.parent);
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
}
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user