@codelaw/rules-security-html · codelaw-rules-security-html

Every rule in this pack is written for codelaw. The catalogue was read against
the OWASP HTML5 Security, Content Security Policy and Cross-Site Request
Forgery cheat sheets (CC BY-SA 4.0; ideas only, no text taken), MDN's
Subresource Integrity page and CodeQL's query list (MIT; ideas only).
Rule sets under a copyleft or source-available licence — eslint-plugin-no-unsanitized
(MPL-2.0), njsscan (LGPL-3.0), Semgrep's rules (the Semgrep Rules License) — are
read for ideas only; no text, pattern or code is taken from them (L2).
