eslint/no-script-url Style
What it does
Disallow javascript: urls
Why is this bad?
Using javascript:
URLs is considered by some as a form of eval
. Code passed in javascript:
URLs must be parsed and evaluated by the browser in the same way that eval
is processed. This can lead to security and performance issues.
Examples
Examples of incorrect code for this rule
javascript
/*eslint no-script-url: "error"*/
location.href = "javascript:void(0)";
location.href = `javascript:void(0)`;