eslint.config.mjs

import security from 'eslint-plugin-security';
import globals from 'globals';
import path from 'node:path';
import { fileURLToPath } from 'node:url';
import js from '@eslint/js';
import { FlatCompat } from '@eslint/eslintrc';

const __filename = fileURLToPath(import.meta.url);
const __dirname = path.dirname(__filename);
const compat = new FlatCompat({
    baseDirectory: __dirname,
    recommendedConfig: js.configs.recommended,
    allConfig: js.configs.all
});

export default [
    ...compat.extends('eslint:recommended'),
    security.configs.recommended,
    {
        plugins: {
            security,
        },

        languageOptions: {
            globals: {
                ...globals.browser,
                ...globals.amd,
                ...globals.jquery,
            },
        },

        rules: {
            indent: ['error', 4],
            'linebreak-style': ['error', 'unix'],

            'no-unused-vars': ['error', {
                vars: 'all',
                args: 'none',
            }],

            quotes: ['error', 'single'],
            semi: ['error', 'always'],
            'security/detect-buffer-noassert': 1,
            'security/detect-child-process': 1,
            'security/detect-disable-mustache-escape': 1,
            'security/detect-eval-with-expression': 1,
            'security/detect-new-buffer': 1,
            'security/detect-no-csrf-before-method-override': 1,
            'security/detect-non-literal-fs-filename': 1,
            'security/detect-non-literal-regexp': 1,
            'security/detect-non-literal-require': 0,
            'security/detect-object-injection': 0,
            'security/detect-possible-timing-attacks': 1,
            'security/detect-pseudoRandomBytes': 1,
            'security/detect-unsafe-regex': 1,
        },
    },
];