Merge pull request #93 from tjenkinson/redos-eslint

Configure `eslint-plugin-redos-detector`

.eslintrc.js

@@ -5,6 +5,7 @@ module.exports = {
     'plugin:@typescript-eslint/recommended-requiring-type-checking',
     'prettier',
   ],
+  plugins: ['redos-detector'],
   parser: '@typescript-eslint/parser',
   parserOptions: {
     ecmaVersion: 2019,
@@ -44,5 +45,6 @@ module.exports = {
     '@typescript-eslint/no-loss-of-precision': ['error'],
     '@typescript-eslint/no-throw-literal': ['error'],
     '@typescript-eslint/no-unused-expressions': ['error'],
+    'redos-detector/no-unsafe-regex': ['error'],
   },
 };

.gitignore

@@ -2,3 +2,4 @@ node_modules
 /dist
 .DS_STORE
 /src/coverage
+.eslintcache

package.json

@@ -18,7 +18,7 @@
   "scripts": {
     "build": "rm -rf dist && rollup --config rollup.config.js",
     "watch": "rollup --config rollup.config.js --watch",
-    "lint": "eslint --ext .ts --max-warnings 0 src",
+    "lint": "eslint --ext .ts --max-warnings 0 --cache src",
     "prettier": "prettier --write .",
     "prettier:check": "prettier --check .",
     "test": "jest",
@@ -50,6 +50,7 @@
     "commander": "9.2.0",
     "eslint": "8.16.0",
     "eslint-config-prettier": "8.5.0",
+    "eslint-plugin-redos-detector": "2.0.12",
     "husky": "8.0.1",
     "jest": "28.1.0",
     "lint-staged": "12.4.1",

renovate.json

@@ -8,6 +8,10 @@
   "vulnerabilityAlerts": true,
   "rangeStrategy": "bump",
   "packageRules": [
+    {
+      "matchPackageNames": ["eslint-plugin-redos-detector"],
+      "stabilityDays": 0
+    },
     {
       "matchPackageNames": ["regjsparser"],
       "rangeStrategy": "pin"

src/downgrade-pattern.test.ts

@@ -1,4 +1,4 @@
-/* eslint-disable no-useless-backreference */
+/* eslint-disable no-useless-backreference, redos-detector/no-unsafe-regex */
 import {
   DowngradedRegexPattern,
   downgradePattern,

src/redos-detector.test.ts

@@ -1,4 +1,4 @@
-/* eslint-disable no-control-regex, no-useless-backreference */
+/* eslint-disable no-control-regex, no-useless-backreference, redos-detector/no-unsafe-regex */
 import {
   downgradePattern,
   isSafe,