@@ -15,45 +15,44 @@ This rule aims to prevent user generated links from creating security vulnerabil
15
15
16
16
There are two main options for the rule:
17
17
18
- - ` {"enforceDynamicLinks": "always"} ` enforces the rule if the href is a dynamic link (default)
19
- - ` {"enforceDynamicLinks": "never"} ` does not enforce the rule if the href is a dynamic link
18
+ * ` {"enforceDynamicLinks": "always"} ` enforces the rule if the href is a dynamic link (default)
19
+ * ` {"enforceDynamicLinks": "never"} ` does not enforce the rule if the href is a dynamic link
20
20
21
21
``` json
22
22
"react/jsx-no-target-blank" : [<enabled>, { enforceDynamicLinks: <enforce> } ]
23
23
```
24
24
25
- - enabled: for enabling the rule. 0=off, 1=warn, 2=error. Defaults to 0.
26
- - enforce: optional string, defaults to "always"
25
+ * enabled: for enabling the rule. 0=off, 1=warn, 2=error. Defaults to 0.
26
+ * enforce: optional string, defaults to "always"
27
+
27
28
28
29
### always (default)
29
30
30
31
When {"enforceDynamicLinks": "always"} is set, the following patterns are considered errors:
31
32
32
33
``` jsx
33
- var Hello = < a target= " _blank" href= " http://example.com/" / > ;
34
- var Hello = < a target= " _blank" href= {dynamicLink} / > ;
34
+ var Hello = < a target= ' _blank' href= " http://example.com/" >< / a >
35
+ var Hello = < a target= ' _blank' href= { dynamicLink } >< / a >
35
36
```
36
37
37
38
The following patterns are ** not** considered errors:
38
39
39
40
``` jsx
40
- var Hello = < p target= " _blank" / > ;
41
- var Hello = (
42
- < a target= " _blank" rel= " noopener noreferrer" href= " http://example.com" / >
43
- );
44
- var Hello = < a target= " _blank" href= " relative/path/in/the/host" / > ;
45
- var Hello = < a target= " _blank" href= " /absolute/path/in/the/host" / > ;
46
- var Hello = < a / > ;
41
+ var Hello = < p target= ' _blank' >< / p>
42
+ var Hello = < a target= ' _blank' rel= ' noopener noreferrer' href= " http://example.com" >< / a>
43
+ var Hello = < a target= ' _blank' href= " relative/path/in/the/host" >< / a>
44
+ var Hello = < a target= ' _blank' href= " /absolute/path/in/the/host" >< / a>
45
+ var Hello = < a>< / a>
47
46
```
48
47
49
48
### never
50
49
51
50
When {"enforceDynamicLinks": "never"} is set, the following patterns are ** not** considered errors:
52
51
53
52
``` jsx
54
- var Hello = < a target= " _blank" href= {dynamicLink} / > ;
53
+ var Hello = < a target= ' _blank' href= { dynamicLink } >< / a >
55
54
```
56
55
57
56
## When Not To Use It
58
57
59
- If you do not have any external links, you can disable this rule
58
+ If you do not have any external links, you can disable this rule
0 commit comments