@@ -15,35 +15,43 @@ This rule aims to prevent user generated links from creating security vulnerabil
15
15
16
16
There are two main options for the rule:
17
17
18
- * ` {"enforceDynamicLinks": "always"} ` enforces the rule if the href is a dynamic link (default)
19
- * ` {"enforceDynamicLinks": "never"} ` does not enforce the rule if the href is a dynamic link
18
+ - ` {"enforceDynamicLinks": "always"} ` enforces the rule if the href is a dynamic link (default)
19
+ - ` {"enforceDynamicLinks": "never"} ` does not enforce the rule if the href is a dynamic link
20
20
21
+ ``` json
22
+ "react/jsx-no-target-blank" : [<enabled>, { enforceDynamicLinks: <enforce> } ]
23
+ ```
24
+
25
+ - enabled: for enabling the rule. 0=off, 1=warn, 2=error. Defaults to 0.
26
+ - enforce: optional string, defaults to "always"
21
27
22
28
### always (default)
23
29
24
30
When {"enforceDynamicLinks": "always"} is set, the following patterns are considered errors:
25
31
26
32
``` jsx
27
- var Hello = < a target= ' _blank' href= " http://example.com/" >< / a >
28
- var Hello = < a target= ' _blank' href= { dynamicLink } >< / a >
33
+ var Hello = < a target= " _blank" href= " http://example.com/" / > ;
34
+ var Hello = < a target= " _blank" href= {dynamicLink} / > ;
29
35
```
30
36
31
37
The following patterns are ** not** considered errors:
32
38
33
39
``` jsx
34
- var Hello = < p target= ' _blank' >< / p>
35
- var Hello = < a target= ' _blank' rel= ' noopener noreferrer' href= " http://example.com" >< / a>
36
- var Hello = < a target= ' _blank' href= " relative/path/in/the/host" >< / a>
37
- var Hello = < a target= ' _blank' href= " /absolute/path/in/the/host" >< / a>
38
- var Hello = < a>< / a>
40
+ var Hello = < p target= " _blank" / > ;
41
+ var Hello = (
42
+ < a target= " _blank" rel= " noopener noreferrer" href= " http://example.com" / >
43
+ );
44
+ var Hello = < a target= " _blank" href= " relative/path/in/the/host" / > ;
45
+ var Hello = < a target= " _blank" href= " /absolute/path/in/the/host" / > ;
46
+ var Hello = < a / > ;
39
47
```
40
48
41
49
### never
42
50
43
51
When {"enforceDynamicLinks": "never"} is set, the following patterns are ** not** considered errors:
44
52
45
53
``` jsx
46
- var Hello = < a target= ' _blank' href= { dynamicLink } >< / a >
54
+ var Hello = < a target= " _blank" href= {dynamicLink} / > ;
47
55
```
48
56
49
57
## When Not To Use It
0 commit comments