mozilla / eslint-plugin-no-unsanitized

Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
Mozilla Public License 2.0
228 stars 37 forks source link

we can't properly look into assignment expressions #61

Open mozfreddyb opened 7 years ago

mozfreddyb commented 7 years ago
       code: "(Async.checkAppReady = document.writeln)(n);",

Shouldnt pass. This is a follow-up of #60.

mozfreddyb commented 6 years ago

Couldn't we just check the right hand side? We do have code for almost everything that goes there, e.g., member expressions, identifiers etc.