Bug 1351608 - Add eslint-plugin-no-unsanitized to eslint-plugin-mozilla. r=standard8

MozReview-Commit-ID: H7NaHioty7f

--HG--
extra : rebase_source : a2aaeea6ee2338206e9fe06679419847d76d1cae

package.json

@@ -7,9 +7,10 @@
     "escope": "^3.6.0",
     "eslint": "3.19.0",
     "eslint-plugin-html": "2.0.3",
-    "eslint-plugin-mozilla": "file:tools\\lint\\eslint\\eslint-plugin-mozilla",
+    "eslint-plugin-mozilla": "file:tools/lint/eslint/eslint-plugin-mozilla",
     "eslint-plugin-react": "6.10.3",
-    "eslint-plugin-spidermonkey-js": "file:tools\\lint\\eslint\\eslint-plugin-spidermonkey-js",
+    "eslint-plugin-spidermonkey-js": "file:tools/lint/eslint/eslint-plugin-spidermonkey-js",
+    "eslint-plugin-no-unsanitized": "2.0.1",
     "espree": "^3.4.0",
     "estraverse": "^4.2.0",
     "ini-parser": "^0.0.2",

tools/lint/eslint/eslint-plugin-mozilla/lib/configs/recommended.js

@@ -63,7 +63,8 @@ module.exports = {
 
   // When adding items to this file please check for effects on sub-directories.
   "plugins": [
-    "mozilla"
+    "mozilla",
+    "no-unsanitized"
   ],
 
   // When adding items to this file please check for effects on all of toolkit
@@ -299,6 +300,11 @@ module.exports = {
     // No (!foo in bar) or (!object instanceof Class)
     "no-unsafe-negation": "error",
 
+    // No unsanitized use of innerHTML=, document.write() etc.
+    // cf. https://github.com/mozilla/eslint-plugin-no-unsanitized#rule-details
+    "no-unsanitized/method": "error",
+    "no-unsanitized/property": "error",
+
     // No declaring variables that are never used
     "no-unused-vars": ["error", {
       "args": "none",

tools/lint/eslint/eslint-plugin-mozilla/package.json

@@ -21,6 +21,7 @@
   "main": "lib/index.js",
   "dependencies": {
     "escope": "^3.6.0",
+    "eslint-plugin-no-unsanitized": "^2.0.1",
     "espree": "^3.4.0",
     "estraverse": "^4.2.0",
     "globals": "^9.14.0",