discovered 03 Aug 2026
eslint-plugin-no-unsanitized
→ View on GitHubThe eslint-plugin-no-unsanitized is a dedicated tool for enforcing safe coding practices in JavaScript by disallowing the use of unsanitized code that can lead to security vulnerabilities. It specifically targets unsafe assignments and function calls, ensuring that developers utilize predefined escaping functions for any dynamic content manipulations, thus promoting better security hygiene in web applications. Notable features include rules that disallow problematic methods like `insertAdjacentHTML` and properties like `innerHTML`, alongside support for the Sanitizer API.