mongodb-js / devtools-shared / 20265794165 / 10 – mongodb-ts-autocomplete

78%

main: 78%

push

github

feat(eslint-plugin-devtools): add rule forbidding non-null prototypes for `Record`s (#604)

`Record` types in TS are typically used to indicate that an object
may have arbitrary keys. This means that using `{}` or similar object
literals to initialize them is a poor choice -- if user code can
cause keys like `hasOwnProperty` or `__proto__` to be used as
keys on those objects, they will not behave as intended.

This has been the cause of many security issues in the JS
ecosystem, so let's add a lint rule to limit impact
of these issues and force ourselves to stick to best practices.

37 of 48 branches covered (77.08%)

Branch coverage included in aggregate %.

128 of 135 relevant lines covered (94.81%)

49.23 hits per line