Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: added new rule “attr-space-between” #1459

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

feat: added new rule “attr-space-between”

bf5325a
Select commit
Loading
Failed to load commit list.
Open

feat: added new rule “attr-space-between” #1459

feat: added new rule “attr-space-between”
bf5325a
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Aug 12, 2024 in 5s

9 new alerts including 9 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 9 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 20 in dist/core/htmlparser.js

See this annotation in the file changed.

Code scanning / CodeQL

Bad HTML filtering regexp High

Comments ending with --> are matched differently from comments ending with --!>. The first is matched with capture group 2 and comments ending with --!> are matched with capture group 3.

Check failure on line 20 in dist/core/htmlparser.js

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with '<-' and containing many repetitions of '!'.

Check failure on line 64 in dist/core/htmlparser.js

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with '</' and with many repetitions of '</!'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!--' and with many repetitions of '<!--a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!' and with many repetitions of '<!='.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- ' and with many repetitions of '<- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !' and with many repetitions of '=<- ! '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !="' and with many repetitions of '" <- !="'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !='' and with many repetitions of '' <- !=''.
This
regular expression
that depends on library input may run slow on strings starting with '</' and with many repetitions of '</!'.
This
regular expression
that depends on library input may run slow on strings starting with '<!--' and with many repetitions of '<!--a'.
This
regular expression
that depends on library input may run slow on strings starting with '<!' and with many repetitions of '<!='.
This
regular expression
that depends on library input may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on library input may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on library input may run slow on strings starting with '<- ' and with many repetitions of '<- '.
This
regular expression
that depends on library input may run slow on strings starting with '<- !' and with many repetitions of '=<- ! '.
This
regular expression
that depends on library input may run slow on strings starting with '<- !="' and with many repetitions of '" <- !="'.
This
regular expression
that depends on library input may run slow on strings starting with '<- !='' and with many repetitions of '' <- !=''.

Check failure on line 33 in dist/htmlhint.js

See this annotation in the file changed.

Code scanning / CodeQL

Bad HTML filtering regexp High

Comments ending with --> are matched differently from comments ending with --!>. The first is matched with capture group 2 and comments ending with --!> are matched with capture group 3.

Check failure on line 33 in dist/htmlhint.js

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with '<-' and containing many repetitions of '!'.

Check failure on line 77 in dist/htmlhint.js

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with '</' and with many repetitions of '</!'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!--' and with many repetitions of '<!--a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!' and with many repetitions of '<!='.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- ' and with many repetitions of '<- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !' and with many repetitions of '=<- ! '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !="' and with many repetitions of '" <- !="'.
This regular expression that depends on
library input
may run slow on strings starting with '<- !='' and with many repetitions of '' <- !=''.

Check failure on line 57 in src/core/htmlparser.ts

See this annotation in the file changed.

Code scanning / CodeQL

Bad HTML filtering regexp High

Comments ending with --> are matched differently from comments ending with --!>. The first is matched with capture group 2 and comments ending with --!> are matched with capture group 3.

Check failure on line 57 in src/core/htmlparser.ts

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with '<-' and containing many repetitions of '!'.

Check failure on line 119 in src/core/htmlparser.ts

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with '</' and with many repetitions of '</!'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!--' and with many repetitions of '<!--a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<!' and with many repetitions of '<!='.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- ' and with many repetitions of '<- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !' and with many repetitions of '=<- ! '.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !="' and with many repetitions of '" <- !="'.
This
regular expression
that depends on
library input
may run slow on strings starting with '<- !='' and with many repetitions of '' <- !=''.
This
regular expression
that depends on library input may run slow on strings starting with '</' and with many repetitions of '</!'.
This
regular expression
that depends on library input may run slow on strings starting with '<!--' and with many repetitions of '<!--a'.
This
regular expression
that depends on library input may run slow on strings starting with '<!' and with many repetitions of '<!='.
This
regular expression
that depends on library input may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on library input may run slow on strings starting with '<-' and with many repetitions of ' '.
This
regular expression
that depends on library input may run slow on strings starting with '<- ' and with many repetitions of '<- '.
This
regular expression
that depends on library input may run slow on strings starting with '<- !' and with many repetitions of '=<- ! '.
This
regular expression
that depends on library input may run slow on strings starting with '<- !="' and with many repetitions of '" <- !="'.
This
regular expression
that depends on library input may run slow on strings starting with '<- !='' and with many repetitions of '' <- !=''.