diff --git a/Gruntfile.js b/Gruntfile.js index 98b079955..a25faba98 100644 --- a/Gruntfile.js +++ b/Gruntfile.js @@ -13,6 +13,18 @@ module.exports = function(grunt) { return contribRules.concat(baseRules); } + function hash(input) { + // initialized with a prime number + let hash = 31; + let i = 0; + for (i = 0; i < input.length; i++) { + // multiply by prime so to get the better distribution of the values + hash = 31 * hash + input.charCodeAt(i); // run the hash function on all chars + hash = hash | 0; // convert to 32 bit signed integer + } + return Math.abs(hash).toString(32).toUpperCase(); + } + function getMetadataFromFile(ruleFile) { const moduleName = './' + ruleFile.replace(/\.js$/, ''); const module = require(moduleName); @@ -290,10 +302,9 @@ module.exports = function(grunt) { const rows = []; const resolution = 'See description on the tslint or tslint-microsoft-contrib website'; - const path = 'teams/SecDev/Support/Lists/WarningCentral'; const procedure = 'TSLint Procedure'; - const header = 'SDL Version,Title,Description,ErrorID,Tool,IssueClass,IssueType,SDL Bug Bar Severity,' + - 'SDL Level,Resolution,SDL Procedure,Item Type,Path,CWE,CWE Description'; + const header = 'Title,Description,ErrorID,Tool,IssueClass,IssueType,SDL Bug Bar Severity,' + + 'SDL Level,Resolution,SDL Procedure,CWE,CWE Description'; getAllRules().forEach(function(ruleFile) { const metadata = getMetadataFromFile(ruleFile); @@ -302,6 +313,7 @@ module.exports = function(grunt) { return; } const ruleName = getMetadataValue(metadata, 'ruleName'); + const tool = 'TSLINT' + hash(ruleName) const issueType = getMetadataValue(metadata, 'issueType'); const severity = getMetadataValue(metadata, 'severity'); const level = getMetadataValue(metadata, 'level'); @@ -309,7 +321,7 @@ module.exports = function(grunt) { const cwe = getMetadataValue(metadata, 'commonWeaknessEnumeration', true, false); const cweDescription = createCweDescription(metadata); - const row = `7,${ruleName},${description},,tslint,${issueClass},${issueType},${severity},${level},${resolution},${procedure},Item,${path},${cwe},${cweDescription}`; + const row = `${ruleName},${description},,${tool},${issueClass},${issueType},${severity},${level},${resolution},${procedure},${cwe},${cweDescription}`; rows.push(row); }); rows.sort(); diff --git a/tslint-warnings.csv b/tslint-warnings.csv index 7d23e52d9..9bd2423ed 100644 --- a/tslint-warnings.csv +++ b/tslint-warnings.csv @@ -1,233 +1,233 @@ -SDL Version,Title,Description,ErrorID,Tool,IssueClass,IssueType,SDL Bug Bar Severity,SDL Level,Resolution,SDL Procedure,Item Type,Path,CWE,CWE Description -7,align,Enforces vertical alignment.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +Title,Description,ErrorID,Tool,IssueClass,IssueType,SDL Bug Bar Severity,SDL Level,Resolution,SDL Procedure,CWE,CWE Description +align,Enforces vertical alignment.,,TSLINTT6VKI6,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,arrow-parens,Requires parentheses around the parameters of arrow function definitions.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,chai-prefer-contains-to-index-of,Avoid Chai assertions that invoke indexOf and compare for a -1 result.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +arrow-parens,Requires parentheses around the parameters of arrow function definitions.,,TSLINT1SCM8RK,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +chai-prefer-contains-to-index-of,Avoid Chai assertions that invoke indexOf and compare for a -1 result.,,TSLINTCSVNDE,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,chai-vague-errors,Avoid Chai assertions that result in vague errors,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +chai-vague-errors,Avoid Chai assertions that result in vague errors,,TSLINTV44EFD,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,class-name,Enforces PascalCased class and interface names.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +class-name,Enforces PascalCased class and interface names.,,TSLINT65UF71,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,comment-format,Enforces formatting rules for single-line comments.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +comment-format,Enforces formatting rules for single-line comments.,,TSLINT1T6OE84,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,curly,Enforces braces for `if`/`for`/`do`/`while` statements.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"483, 710","CWE 483 - Incorrect Block Delimitation +curly,Enforces braces for `if`/`for`/`do`/`while` statements.,,TSLINTT90EOE,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"483, 710","CWE 483 - Incorrect Block Delimitation CWE 710 - Coding Standards Violation" -7,forin,Requires a `for ... in` statement to be filtered with an `if` statement.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +forin,Requires a `for ... in` statement to be filtered with an `if` statement.,,TSLINTTBFHNF,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,function-name,Applies a naming convention to function names and method names,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +function-name,Applies a naming convention to function names and method names,,TSLINTN7VHIV,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,indent,Enforces indentation with tabs or spaces.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +indent,Enforces indentation with tabs or spaces.,,TSLINTGKM7CB,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,interface-name,Requires interface names to begin with a capital 'I',,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +interface-name,Requires interface names to begin with a capital 'I',,TSLINT1JHB5S2,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,jquery-deferred-must-complete,"When a JQuery Deferred instance is created, then either reject() or resolve() must be called on it within all code branches in the scope.",,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,jsdoc-format,Enforces basic format rules for JSDoc comments.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +jquery-deferred-must-complete,"When a JQuery Deferred instance is created, then either reject() or resolve() must be called on it within all code branches in the scope.",,TSLINTQ72FQV,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +jsdoc-format,Enforces basic format rules for JSDoc comments.,,TSLINTK8SOHC,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,label-position,Only allows labels in sensible locations.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,670,"CWE 670 - Always-Incorrect Control Flow Implementation" -7,label-undefined,Checks that labels are defined before usage.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,670,"CWE 670 - Always-Incorrect Control Flow Implementation" -7,linebreak-style,Enforces a consistent linebreak style.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +label-position,Only allows labels in sensible locations.,,TSLINT1SMBSHV,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,670,CWE 670 - Always-Incorrect Control Flow Implementation +label-undefined,Checks that labels are defined before usage.,,TSLINT1BFJ028,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,670,CWE 670 - Always-Incorrect Control Flow Implementation +linebreak-style,Enforces a consistent linebreak style.,,TSLINT1QRFV7G,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,max-file-line-count,Requires files to remain under a certain number of lines,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +max-file-line-count,Requires files to remain under a certain number of lines,,TSLINT1RKDRG1,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,max-func-body-length,Avoid long functions.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +max-func-body-length,Avoid long functions.,,TSLINT51G41G,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,max-line-length,Requires lines to be under a certain max length.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +max-line-length,Requires lines to be under a certain max length.,,TSLINT728UFN,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,member-access,Requires explicit visibility declarations for class members.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +member-access,Requires explicit visibility declarations for class members.,,TSLINT1ME2GE8,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,member-ordering,Enforces member ordering.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +member-ordering,Enforces member ordering.,,TSLINT7UKID8,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,missing-jsdoc,All files must have a top level JSDoc comment.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +missing-jsdoc,All files must have a top level JSDoc comment.,,TSLINT117J7CN,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,mocha-avoid-only,Do not invoke Mocha's describe.only or it.only functions.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,new-parens,Requires parentheses when invoking a constructor via the `new` keyword.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-any,Diallows usages of `any` as a type declaration.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +mocha-avoid-only,Do not invoke Mocha's describe.only or it.only functions.,,TSLINT1M1BHOM,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +new-parens,Requires parentheses when invoking a constructor via the `new` keyword.,,TSLINTJF199B,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-any,Diallows usages of `any` as a type declaration.,,TSLINTKSGO5V,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-arg,Disallows use of `arguments.callee`.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-arg,Disallows use of `arguments.callee`.,,TSLINTKSGO99,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-backbone-get-set-outside-model,"Avoid using `model.get('x')` and `model.set('x', value)` Backbone accessors outside of the owning model.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-backbone-get-set-outside-model,"Avoid using `model.get('x')` and `model.set('x', value)` Backbone accessors outside of the owning model.",,TSLINTAJ7LM,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-banned-terms,"Do not use banned terms: caller, callee, eval, arguments.",,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"676, 242, 116","CWE 676 - Use of Potentially Dangerous Function +no-banned-terms,"Do not use banned terms: caller, callee, eval, arguments.",,TSLINTQ1KMQR,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"676, 242, 116","CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-bitwise,Disallows bitwise operators.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-conditional-assignment,Disallows any type of assignment in conditionals.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"480, 481, 710","CWE 480 - Use of Incorrect Operator +no-bitwise,Disallows bitwise operators.,,TSLINT1T99MRS,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-conditional-assignment,Disallows any type of assignment in conditionals.,,TSLINT1MA2BM1,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"480, 481, 710","CWE 480 - Use of Incorrect Operator CWE 481 - Assigning instead of Comparing CWE 710 - Coding Standards Violation" -7,no-consecutive-blank-lines,Disallows more than one blank line in a row.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-console,Bans the use of specified `console` methods.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-constant-condition,Do not use constant expressions in conditions.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 570, 571, 670","CWE 398 - Indicator of Poor Code Quality +no-consecutive-blank-lines,Disallows more than one blank line in a row.,,TSLINTQ1NU8A,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-console,Bans the use of specified `console` methods.,,TSLINTTSFLAM,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-constant-condition,Do not use constant expressions in conditions.,,TSLINTOVHK81,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 570, 571, 670","CWE 398 - Indicator of Poor Code Quality CWE 570 - Expression is Always False CWE 571 - Expression is Always True CWE 670 - Always-Incorrect Control Flow Implementation" -7,no-construct,"Disallows access to the constructors of `String`, `Number`, and `Boolean`.",,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-constructor-vars,Disallows parameter properties.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-control-regex,Do not use control characters in regular expressions,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-cookies,Do not use cookies,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"315, 539, 565, 614","CWE 315 - Cleartext Storage of Sensitive Information in a Cookie +no-construct,"Disallows access to the constructors of `String`, `Number`, and `Boolean`.",,TSLINT1KDSNSM,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-constructor-vars,Disallows parameter properties.,,TSLINTSUN8UK,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-control-regex,Do not use control characters in regular expressions,,TSLINT17HJQNA,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-cookies,Do not use cookies,,TSLINTTRQU0U,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"315, 539, 565, 614","CWE 315 - Cleartext Storage of Sensitive Information in a Cookie CWE 539 - Information Exposure Through Persistent Cookies CWE 565 - Reliance on Cookies without Validation and Integrity Checking CWE 614 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute" -7,no-debugger,Disallows `debugger` statements.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-debugger,Disallows `debugger` statements.,,TSLINT2KSM9E,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-delete-expression,Do not delete expressions. Only properties should be deleted,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-disable-auto-sanitization,Do not disable auto-sanitization of HTML because this opens up your page to an XSS attack. ,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"157, 159, 75, 79, 85, 749, 676","CWE 157 - Failure to Sanitize Paired Delimiters +no-delete-expression,Do not delete expressions. Only properties should be deleted,,TSLINTM33ICD,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-disable-auto-sanitization,Do not disable auto-sanitization of HTML because this opens up your page to an XSS attack. ,,TSLINT1915L5R,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"157, 159, 75, 79, 85, 749, 676","CWE 157 - Failure to Sanitize Paired Delimiters CWE 159 - Failure to Sanitize Special Element CWE 75 - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE 85 - Doubled Character XSS Manipulations CWE 749 - Exposed Dangerous Method or Function CWE 676 - Use of Potentially Dangerous Function" -7,no-document-domain,Do not write to document.domain. Scripts setting document.domain to any value should be validated to ensure that the value is on a list of allowed sites.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-document-write,Do not use document.write,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"79, 85","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') +no-document-domain,Do not write to document.domain. Scripts setting document.domain to any value should be validated to ensure that the value is on a list of allowed sites.,,TSLINT19OSJ09,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-document-write,Do not use document.write,,TSLINTMGIOVQ,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"79, 85","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE 85 - Doubled Character XSS Manipulations" -7,no-duplicate-case,Do not use duplicate case labels in switch statements.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-duplicate-case,Do not use duplicate case labels in switch statements.,,TSLINT3MSPFV,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-duplicate-key,Disallows duplicate keys in object literals.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 694, 462","CWE 398 - Indicator of Poor Code Quality +no-duplicate-key,Disallows duplicate keys in object literals.,,TSLINT8C37DG,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 694, 462","CWE 398 - Indicator of Poor Code Quality CWE 694 - Use of Multiple Resources with Duplicate Identifier CWE 462 - Duplicate Key in Associative List (Alist)" -7,no-duplicate-variable,Disallows duplicate variable declarations in the same block scope.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,398,"CWE 398 - Indicator of Poor Code Quality" -7,no-empty,Disallows empty blocks.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,398,"CWE 398 - Indicator of Poor Code Quality" -7,no-empty-interfaces,Do not use empty interfaces.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-duplicate-variable,Disallows duplicate variable declarations in the same block scope.,,TSLINT6TMGHL,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,398,CWE 398 - Indicator of Poor Code Quality +no-empty,Disallows empty blocks.,,TSLINTJ99V50,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,398,CWE 398 - Indicator of Poor Code Quality +no-empty-interfaces,Do not use empty interfaces.,,TSLINT1L2THN7,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-eval,Disallows `eval` function invocations.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-eval,Disallows `eval` function invocations.,,TSLINT7KB919,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-exec-script,Do not use the execScript functions,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-exec-script,Do not use the execScript functions,,TSLINT14VRBL6,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function" -7,no-for-in,Avoid use of for-in statements. They can be replaced by Object.keys,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-for-in,Avoid use of for-in statements. They can be replaced by Object.keys,,TSLINT1ASCJ7M,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-for-in-array,Disallows iterating over an array with a for-in loop.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-function-constructor-with-string-args,Do not use the version of the Function constructor that accepts a string argument to define the body of the function,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-for-in-array,Disallows iterating over an array with a for-in loop.,,TSLINTAOUF9U,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-function-constructor-with-string-args,Do not use the version of the Function constructor that accepts a string argument to define the body of the function,,TSLINT1QSP20J,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-function-expression,Do not use function expressions; use arrow functions (lambdas) instead.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-function-expression,Do not use function expressions; use arrow functions (lambdas) instead.,,TSLINT1SUK540,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-http-string,Do not use strings that start with 'http:'. URL strings should start with 'https:'. ,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,319,"CWE 319 - Cleartext Transmission of Sensitive Information" -7,no-increment-decrement,Avoid use of increment and decrement operators particularly as part of complicated expressions,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-http-string,Do not use strings that start with 'http:'. URL strings should start with 'https:'. ,,TSLINT1IH80PN,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,319,CWE 319 - Cleartext Transmission of Sensitive Information +no-increment-decrement,Avoid use of increment and decrement operators particularly as part of complicated expressions,,TSLINTEJN48,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-inner-html,"Do not write values to innerHTML, outerHTML, or set HTML using the JQuery html() function.",,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"79, 85, 710","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') +no-inner-html,"Do not write values to innerHTML, outerHTML, or set HTML using the JQuery html() function.",,TSLINT1SKOIBH,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"79, 85, 710","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE 85 - Doubled Character XSS Manipulations CWE 710 - Coding Standards Violation" -7,no-invalid-regexp,Do not use invalid regular expression strings in the RegExp constructor.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-invalid-this,Disallows using the `this` keyword outside of classes.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-jquery-raw-elements,Do not create HTML elements using JQuery and string concatenation. It is error prone and can hide subtle defects.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-invalid-regexp,Do not use invalid regular expression strings in the RegExp constructor.,,TSLINT18FB6OK,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-invalid-this,Disallows using the `this` keyword outside of classes.,,TSLINTD2VI5V,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-jquery-raw-elements,Do not create HTML elements using JQuery and string concatenation. It is error prone and can hide subtle defects.,,TSLINTBQ3MR2,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-multiline-string,Do not declare multiline strings,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-octal-literal,Do not use octal literals or escaped octal sequences,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-regex-spaces,Do not use multiple spaces in a regular expression literal. Similar to the ESLint no-regex-spaces rule,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-reserved-keywords,"Do not use reserved keywords as names of local variables, fields, functions, or other identifiers.",,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,398,"CWE 398 - Indicator of Poor Code Quality" -7,no-shadowed-variable,Disallows shadowing variable declarations.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-multiline-string,Do not declare multiline strings,,TSLINT10K5P9U,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-octal-literal,Do not use octal literals or escaped octal sequences,,TSLINT1F5BIM0,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-regex-spaces,Do not use multiple spaces in a regular expression literal. Similar to the ESLint no-regex-spaces rule,,TSLINT1T5TJ80,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-reserved-keywords,"Do not use reserved keywords as names of local variables, fields, functions, or other identifiers.",,TSLINT14J77I2,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,398,CWE 398 - Indicator of Poor Code Quality +no-shadowed-variable,Disallows shadowing variable declarations.,,TSLINTH3IPT3,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-single-line-block-comment,Avoid single line block comments; use single line comments instead,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-sparse-arrays,"Do not use sparse arrays. Sparse arrays contain empty slots, most frequently due to multiple commas being used in an array literal.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-single-line-block-comment,Avoid single line block comments; use single line comments instead,,TSLINT1GP42PU,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-sparse-arrays,"Do not use sparse arrays. Sparse arrays contain empty slots, most frequently due to multiple commas being used in an array literal.",,TSLINT1FQ43R6,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-stateless-class,A stateless class represents a failure in the object oriented design of the system.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-stateless-class,A stateless class represents a failure in the object oriented design of the system.,,TSLINT1HFBCGO,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-string-based-set-immediate,Do not use the version of setImmediate that accepts code as a string argument.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-string-based-set-immediate,Do not use the version of setImmediate that accepts code as a string argument.,,TSLINT1HQR2RT,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-string-based-set-interval,Do not use the version of setInterval that accepts code as a string argument.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-string-based-set-interval,Do not use the version of setInterval that accepts code as a string argument.,,TSLINT54EPRP,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-string-based-set-timeout,Do not use the version of setTimeout that accepts code as a string argument.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') +no-string-based-set-timeout,Do not use the version of setTimeout that accepts code as a string argument.,,TSLINT16T591D,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"95, 676, 242, 116","CWE 95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE 676 - Use of Potentially Dangerous Function CWE 242 - Use of Inherently Dangerous Function CWE 116 - Improper Encoding or Escaping of Output" -7,no-string-literal,Disallows object access via string literals.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-string-literal,Disallows object access via string literals.,,TSLINT2USQI0,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-switch-case-fall-through,Disallows falling through case statements.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 484, 710","CWE 398 - Indicator of Poor Code Quality +no-switch-case-fall-through,Disallows falling through case statements.,,TSLINTOMSBL4,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 484, 710","CWE 398 - Indicator of Poor Code Quality CWE 484 - Omitted Break Statement in Switch CWE 710 - Coding Standards Violation" -7,no-trailing-whitespace,Disallows trailing whitespace at the end of a line.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-trailing-whitespace,Disallows trailing whitespace at the end of a line.,,TSLINTI9P6D1,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-typeof-undefined,Do not use the idiom typeof `x === 'undefined'`. You can safely use the simpler x === undefined or perhaps x == null if you want to check for either null or undefined.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-unnecessary-bind,Do not bind `this` as the context for a function literal or lambda expression.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-typeof-undefined,Do not use the idiom typeof `x === 'undefined'`. You can safely use the simpler x === undefined or perhaps x == null if you want to check for either null or undefined.,,TSLINTQLSFMV,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-unnecessary-bind,Do not bind `this` as the context for a function literal or lambda expression.,,TSLINT1TO0VN1,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-unnecessary-field-initialization,Do not unnecessarily initialize the fields of a class to values they already have.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-unnecessary-field-initialization,Do not unnecessarily initialize the fields of a class to values they already have.,,TSLINT1IR8ES9,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-unnecessary-local-variable,Do not declare a variable only to return it from the function on the next line.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"563, 710","CWE 563 - Assignment to Variable without Use ('Unused Variable') +no-unnecessary-local-variable,Do not declare a variable only to return it from the function on the next line.,,TSLINT16900TU,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"563, 710","CWE 563 - Assignment to Variable without Use ('Unused Variable') CWE 710 - Coding Standards Violation" -7,no-unnecessary-override,Do not write a method that only calls super() on the parent method with the same arguments.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-unnecessary-override,Do not write a method that only calls super() on the parent method with the same arguments.,,TSLINT1GCOUSG,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-unnecessary-semicolons,Remove unnecessary semicolons,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-unnecessary-semicolons,Remove unnecessary semicolons,,TSLINTEL0RJQ,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-unreachable,"Disallows unreachable code after `break`, `catch`, `throw`, and `return` statements.",,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,no-unsafe-finally,"Disallows control flow statements, such as `return`, `continue`, `break` and `throws` in finally blocks.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 584, 710","CWE 398 - Indicator of Poor Code Quality +no-unreachable,"Disallows unreachable code after `break`, `catch`, `throw`, and `return` statements.",,TSLINT1Q60BL7,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +no-unsafe-finally,"Disallows control flow statements, such as `return`, `continue`, `break` and `throws` in finally blocks.",,TSLINT1QMOM2N,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 584, 710","CWE 398 - Indicator of Poor Code Quality CWE 584 - Return Inside Finally Block CWE 710 - Coding Standards Violation" -7,no-unused-expression,Disallows unused expression statements.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality +no-unused-expression,Disallows unused expression statements.,,TSLINT4EPRRU,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality CWE 563 - Assignment to Variable without Use ('Unused Variable') CWE 710 - Coding Standards Violation" -7,no-unused-new,Disallows unused 'new' expression statements.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality +no-unused-new,Disallows unused 'new' expression statements.,,TSLINT1ELSO8A,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality CWE 563 - Assignment to Variable without Use ('Unused Variable') CWE 710 - Coding Standards Violation" -7,no-unused-variable,"Disallows unused imports, variables, functions and private class members.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality +no-unused-variable,"Disallows unused imports, variables, functions and private class members.",,TSLINT1TQIF8Q,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 563, 710","CWE 398 - Indicator of Poor Code Quality CWE 563 - Assignment to Variable without Use ('Unused Variable') CWE 710 - Coding Standards Violation" -7,no-use-before-declare,Disallows usage of variables before their declaration.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 456, 710","CWE 398 - Indicator of Poor Code Quality +no-use-before-declare,Disallows usage of variables before their declaration.,,TSLINTUU9UNF,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 456, 710","CWE 398 - Indicator of Poor Code Quality CWE 456 - Missing Initialization of a Variable CWE 710 - Coding Standards Violation" -7,no-var-keyword,Disallows usage of the `var` keyword.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality +no-var-keyword,Disallows usage of the `var` keyword.,,TSLINT15BQNA,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality CWE 705 - Incorrect Control Flow Scoping CWE 710 - Coding Standards Violation" -7,no-var-requires,Disallows the use of require statements except in import statements.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,no-var-self,"Do not use var self = this; instead, manage scope with arrow functions/lambdas.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-var-requires,Disallows the use of require statements except in import statements.,,TSLINT1VG9PEV,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +no-var-self,"Do not use var self = this; instead, manage scope with arrow functions/lambdas.",,TSLINT1KHI461,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,no-with-statement,Do not use with statements. Assign the item to a new variable instead,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +no-with-statement,Do not use with statements. Assign the item to a new variable instead,,TSLINT185D93L,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,object-literal-key-quotes,Enforces consistent object literal property quote style.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +object-literal-key-quotes,Enforces consistent object literal property quote style.,,TSLINT1HEHPBE,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,one-line,Requires the specified tokens to be on the same line as the expression preceding them.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +one-line,Requires the specified tokens to be on the same line as the expression preceding them.,,TSLINT1KDV90Q,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,one-variable-per-declaration,Disallows multiple variable definitions in the same declaration statement.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,only-arrow-functions,Disallows traditional (non-arrow) function expressions.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,ordered-imports,Requires that import statements be alphabetized.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +one-variable-per-declaration,Disallows multiple variable definitions in the same declaration statement.,,TSLINTSULIR1,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +only-arrow-functions,Disallows traditional (non-arrow) function expressions.,,TSLINT1ANTAAL,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +ordered-imports,Requires that import statements be alphabetized.,,TSLINT1FC7VGF,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,prefer-array-literal,Use array literal syntax when declaring or instantiating array types.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +prefer-array-literal,Use array literal syntax when declaring or instantiating array types.,,TSLINTCHFS93,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,prefer-const,Use const to declare variables if they are only assigned a value once.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality +prefer-const,Use const to declare variables if they are only assigned a value once.,,TSLINTGOC17R,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality CWE 705 - Incorrect Control Flow Scoping CWE 710 - Coding Standards Violation" -7,promise-must-complete,"When a Promise instance is created, then either the reject() or resolve() parameter must be called on it within all code branches in the scope.",,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,quotemark,Requires single or double quotes for string literals.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +promise-must-complete,"When a Promise instance is created, then either the reject() or resolve() parameter must be called on it within all code branches in the scope.",,TSLINT4SIARK,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +quotemark,Requires single or double quotes for string literals.,,TSLINTU8MMGA,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,radix,Requires the radix parameter to be specified when calling `parseInt`.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,react-no-dangerous-html,Do not use React's dangerouslySetInnerHTML API.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"79, 85, 710","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') +radix,Requires the radix parameter to be specified when calling `parseInt`.,,TSLINTTLKJQ5,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +react-no-dangerous-html,Do not use React's dangerouslySetInnerHTML API.,,TSLINTPH7BOD,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"79, 85, 710","CWE 79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE 85 - Doubled Character XSS Manipulations CWE 710 - Coding Standards Violation" -7,react-this-binding-issue,When using React components you must be careful to correctly bind the `this` reference on any methods that you pass off to child components as callbacks.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,react-unused-props-and-state,Remove unneeded properties defined in React Props and State interfaces,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,398,"CWE 398 - Indicator of Poor Code Quality" -7,restrict-plus-operands,"When adding two variables, operands must both be of type number or of type string.",,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 597, 351, 480, 704, 710","CWE 398 - Indicator of Poor Code Quality +react-this-binding-issue,When using React components you must be careful to correctly bind the `this` reference on any methods that you pass off to child components as callbacks.,,TSLINTPH85PH,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +react-unused-props-and-state,Remove unneeded properties defined in React Props and State interfaces,,TSLINT9FI4LK,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,398,CWE 398 - Indicator of Poor Code Quality +restrict-plus-operands,"When adding two variables, operands must both be of type number or of type string.",,TSLINT15S62ML,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 597, 351, 480, 704, 710","CWE 398 - Indicator of Poor Code Quality CWE 597 - Use of Wrong Operator in String Comparison CWE 351 - Insufficient Type Distinction CWE 480 - Use of Incorrect Operator CWE 704 - Incorrect Type Conversion or Cast CWE 710 - Coding Standards Violation" -7,semicolon,Enforces consistent semicolon usage at the end of every statement.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +semicolon,Enforces consistent semicolon usage at the end of every statement.,,TSLINT1L591RI,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,switch-default,Require a `default` case in all `switch` statements.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 474, 710","CWE 398 - Indicator of Poor Code Quality +switch-default,Require a `default` case in all `switch` statements.,,TSLINTKNBMK7,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 474, 710","CWE 398 - Indicator of Poor Code Quality CWE 474 - Use of Function with Inconsistent Implementations CWE 710 - Coding Standards Violation" -7,trailing-comma,"Requires or disallows trailing commas in array and object literals, destructuring assignments and named imports.",,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,triple-equals,Requires `===` and `!==` in place of `==` and `!=`.,,tslint,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +trailing-comma,"Requires or disallows trailing commas in array and object literals, destructuring assignments and named imports.",,TSLINT1R9EG1T,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +triple-equals,Requires `===` and `!==` in place of `==` and `!=`.,,TSLINT1A3MGIF,Non-SDL,Warning,Moderate,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,typedef,Requires type definitions to exist.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +typedef,Requires type definitions to exist.,,TSLINT1GMMOCC,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,typedef-whitespace,Requires or disallows whitespace for type definitions.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +typedef-whitespace,Requires or disallows whitespace for type definitions.,,TSLINTGCDJL2,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,underscore-consistent-invocation,Enforce a consistent usage of the _ functions,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +underscore-consistent-invocation,Enforce a consistent usage of the _ functions,,TSLINT5C2409,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,use-isnan,Enforces use of the `isNaN()` function to check for NaN references instead of a comparison to the `NaN` constant.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,398,"CWE 398 - Indicator of Poor Code Quality" -7,use-named-parameter,"Do not reference the arguments object by numerical index; instead, use a named parameter.",,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,710,"CWE 710 - Coding Standards Violation" -7,use-strict,Requires using ECMAScript 5's strict mode.,,tslint,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality +use-isnan,Enforces use of the `isNaN()` function to check for NaN references instead of a comparison to the `NaN` constant.,,TSLINTPUV7LC,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,398,CWE 398 - Indicator of Poor Code Quality +use-named-parameter,"Do not reference the arguments object by numerical index; instead, use a named parameter.",,TSLINTKPEHQG,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,710,CWE 710 - Coding Standards Violation +use-strict,Requires using ECMAScript 5's strict mode.,,TSLINT1DI9CPE,SDL,Error,Critical,Mandatory,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 705, 710","CWE 398 - Indicator of Poor Code Quality CWE 705 - Incorrect Control Flow Scoping CWE 710 - Coding Standards Violation" -7,valid-typeof,Ensures that the results of typeof are compared against a valid string.,,tslint,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,, -7,variable-name,Checks variable names for various errors.,,tslint,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality +valid-typeof,Ensures that the results of typeof are compared against a valid string.,,TSLINT1IB59P1,Non-SDL,Error,Critical,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,, +variable-name,Checks variable names for various errors.,,TSLINT1CIV7K3,Non-SDL,Warning,Important,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality +CWE 710 - Coding Standards Violation" +whitespace,Enforces whitespace style conventions.,,TSLINTC35UUS,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,"398, 710","CWE 398 - Indicator of Poor Code Quality CWE 710 - Coding Standards Violation" -7,whitespace,Enforces whitespace style conventions.,,tslint,Non-SDL,Warning,Low,Opportunity for Excellence,See description on the tslint or tslint-microsoft-contrib website,TSLint Procedure,Item,teams/SecDev/Support/Lists/WarningCentral,"398, 710","CWE 398 - Indicator of Poor Code Quality -CWE 710 - Coding Standards Violation" \ No newline at end of file