Merge pull request #33 from Stassi/feature/eslint-plugin-no-unsanitized

feature/eslint-plugin-no-unsanitized

.eslintrc.cjs

@@ -71,6 +71,14 @@ module.exports = {
         ],
       },
     },
+    {
+      files: ['*.js', '*.ts'],
+      plugins: ['no-unsanitized'],
+      rules: {
+        'no-unsanitized/method': 'error',
+        'no-unsanitized/property': 'error',
+      },
+    },
   ],
   parser: '@babel/eslint-parser',
   parserOptions: {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stassi/leaf",
-  "version": "0.0.32",
+  "version": "0.0.33",
   "description": "Leaflet adapter.",
   "keywords": [
     "cartography",
@@ -76,6 +76,7 @@
     "eslint-plugin-import": "^2.30.0",
     "eslint-plugin-jest": "^28.8.3",
     "eslint-plugin-jsonc": "^2.16.0",
+    "eslint-plugin-no-unsanitized": "^4.1.1",
     "eslint-plugin-prettier": "^5.2.1",
     "expect-puppeteer": "^10.1.1",
     "jest": "^29.7.0",

public/leaflet-adapter/document-object-model/dom-element.js

@@ -12,6 +12,7 @@ export function domElement({ name, style }) {
     },
     element,
     setInnerHtml(innerHtml) {
+      // eslint-disable-next-line no-unsanitized/property -- TODO: Sanitize input
       element.innerHTML = innerHtml
       return innerHtml
     },

public/tutorial/choropleth/script/choropleth.js

@@ -1,4 +1,5 @@
 /* eslint-disable no-nested-ternary -- copied from tutorial */
+/* eslint-disable no-unsanitized/property -- copied from tutorial */
 
 import { DomUtility } from '../../../leaflet-adapter/document-object-model/dom-utility.js'
 import { control } from '../../../leaflet-adapter/control/control.js'