Rule proposal: require-css-escape
Description
CSS.escape should always be used when interpolating arbritrary variables into a CSS selector to ensure correct escaping.
Fail
document.querySelector(`#${id}`);el.querySelectorAll(`a[href^="#${hash}"]`);Pass
document.querySelector(`#${CSS.escape(id)}`);el.querySelectorAll(`a[href^="#${CSS.escape(hash)}"]`);Any tagged template should not trigger the rule:
document.querySelector(cssEscape`#${id}`);
sindresorhus / eslint-plugin-unicorn
More than 100 powerful ESLint rules
4.2k
How does funding with Polar work?
1
Pay now to fund the work behind this issue.
2
Get updates on progress being made.
3
Maintainer is rewarded once the issue is completed.
FAQ
Backer
You're funding impactful open source efforts
Contributor
You want to contribute to this effort
Maintainer
You want to get funding like this too