mongodb-js / devtools-shared / 20265794165 / 6 – devtools-connect

78%

main: 78%

push

github

feat(eslint-plugin-devtools): add rule forbidding non-null prototypes for `Record`s (#604)

`Record` types in TS are typically used to indicate that an object
may have arbitrary keys. This means that using `{}` or similar object
literals to initialize them is a poor choice -- if user code can
cause keys like `hasOwnProperty` or `__proto__` to be used as
keys on those objects, they will not behave as intended.

This has been the cause of many security issues in the JS
ecosystem, so let's add a lint rule to limit impact
of these issues and force ourselves to stick to best practices.

174 of 557 branches covered (31.24%)

Branch coverage included in aggregate %.

410 of 939 relevant lines covered (43.66%)

3.48 hits per line