fix(security): disable eslint security output temporarily (#1238)

components/CopyButton/CopyButton.tsx

@@ -22,7 +22,7 @@ function CopyButton({ code, className }: Props): JSX.Element {
         className,
         'outline-focus-visible absolute right-5 top-1.5 md:top-1',
       )}
-      // eslint-disable-next-line ts/no-misused-promises
+      // eslint-disable-next-line ts/no-misused-promises -- no need to handle promise.
       onClick={copy}
     >
       <Toggle

components/Editor/Editor.tsx

@@ -32,6 +32,7 @@ function Editor({ template = 'react-ts', children }: Props): JSX.Element {
       const filePath = normalizeFilepath(filename, language)
       const code = codeElement.props.children
 
+      // eslint-disable-next-line security/detect-object-injection -- `result` is not to execute.
       result[filePath] = {
         code,
       }

components/ErrorBoundary/ErrorBoundary.tsx

@@ -32,7 +32,7 @@ class ErrorBoundary extends Component<Props, State> {
   public render() {
     const { hasError, error } = this.state
     const { children } = this.props
-    // eslint-disable-next-line node/prefer-global/process
+    // eslint-disable-next-line node/prefer-global/process -- SWC/Webpack supports process.env.NODE_ENV.
     const isDevelopment = process.env.NODE_ENV === 'development'
 
     if (hasError && isDevelopment) {

components/Header/Header.test.tsx

@@ -8,7 +8,7 @@ describe('Header', () => {
   it('should render correctly (snapshot)', async () => {
     const { container } = render(<Header posts={mockPosts} />)
 
-    // eslint-disable-next-line testing-library/no-wait-for-snapshot
+    // eslint-disable-next-line testing-library/no-wait-for-snapshot -- Wait for the snapshot to be taken.
     await waitFor(() => expect(container).toMatchSnapshot())
   })
 })

components/MDX/MDX.tsx

@@ -14,7 +14,7 @@ import Divider from './MDXDivider'
 import Input from './MDXInput'
 import Pre from './MDXPre'
 
-// eslint-disable-next-line ts/no-unsafe-assignment
+// eslint-disable-next-line ts/no-unsafe-assignment -- dynamic import.
 const Editor = dynamic(() => import('@components/Editor')) as any
 
 const Headings = {
@@ -46,7 +46,7 @@ const CodeBlocks = {
 
 const customComponents = {
   Button,
-  // eslint-disable-next-line ts/no-unsafe-assignment
+  // eslint-disable-next-line ts/no-unsafe-assignment -- dynamic import.
   Editor,
 }
 

components/TagsCloud/TagsCloud.tsx

@@ -9,6 +9,7 @@ interface Props {
 
 function TagsCloud({ tags, activeTag }: Props): JSX.Element {
   let tagsList = Object.keys(tags).sort((a, b) => {
+    // eslint-disable-next-line security/detect-object-injection -- key is safe.
     return tags[b] - tags[a]
   })
 
@@ -25,6 +26,7 @@ function TagsCloud({ tags, activeTag }: Props): JSX.Element {
       {tagsList.map(tag => (
         <LinkTag
           key={tag}
+          // eslint-disable-next-line security/detect-object-injection -- key is safe.
           tag={`${tag} ${tags[tag]}`}
           href={`/tag/${tag}`}
           color={activeTag ? colors.gray : getColorByName(tag)}

config/colors.ts

@@ -37,7 +37,9 @@ function hashString(name: string) {
 function getColorByName(name: string): string {
   const palette = Object.keys(colorPalette)
   const colorIdx = hashString(name) % palette.length
+  // eslint-disable-next-line security/detect-object-injection -- colorIdx is safe.
   const paletteColor = palette[colorIdx] as PaletteColor
+  // eslint-disable-next-line security/detect-object-injection -- paletteColor is safe.
   return colorPalette[paletteColor]
 }
 

hooks/useVisibility.test.tsx

@@ -50,9 +50,9 @@ describe('useVisibility', () => {
 
     fireEvent.scroll(window, { target: { scrollY: 100 } })
 
-    // eslint-disable-next-line testing-library/await-async-utils
+    // eslint-disable-next-line testing-library/await-async-utils -- no need to await.
     void waitFor(() => expect(onBottomPassed).toHaveBeenCalled())
-    // eslint-disable-next-line testing-library/await-async-utils
+    // eslint-disable-next-line testing-library/await-async-utils -- no need to await.
     void waitFor(() => expect(onBottomPassedReverse).toHaveBeenCalled())
   })
 })

layouts/Layout.test.tsx

@@ -13,7 +13,7 @@ describe('Layout', () => {
       </Layout>,
     )
 
-    // eslint-disable-next-line testing-library/no-wait-for-snapshot
+    // eslint-disable-next-line testing-library/no-wait-for-snapshot -- Wait for the snapshot to be taken.
     await waitFor(() => expect(container).toMatchSnapshot())
   })
 })

layouts/PostLayout.test.tsx

@@ -13,7 +13,7 @@ describe('PostLayout', () => {
       </PostLayout>,
     )
 
-    // eslint-disable-next-line testing-library/no-wait-for-snapshot
+    // eslint-disable-next-line testing-library/no-wait-for-snapshot -- Wait for the snapshot to be taken.
     await waitFor(() => expect(container).toMatchSnapshot())
   })
 })

lib/getGitHubData.ts

@@ -58,7 +58,7 @@ export default async function getGitHubData(): Promise<GitHub> {
       }
     }
   } else {
-    // eslint-disable-next-line no-console
+    // eslint-disable-next-line no-console -- need for CLI output.
     console.info('Not for Vercel build, fallback to local GitHub data.')
   }
 

lib/getPostsData.ts

@@ -39,6 +39,7 @@ function getReadingTime(content: string): number {
 }
 
 async function generatePostData(filePath: string): Promise<PostType> {
+  // eslint-disable-next-line security/detect-non-literal-fs-filename -- filePath is safe.
   const fileContent = await fs.readFile(filePath, 'utf8')
   const slug = path.basename(filePath, path.extname(filePath))
 
@@ -149,8 +150,13 @@ async function getTagsData(): Promise<TagsType> {
     .map(post => post.tags || [])
     .flat()
     .reduce((tags: TagsType, tag: Tag) => {
-      if (!tags[tag])
+      // eslint-disable-next-line security/detect-object-injection -- key is safe.
+      if (!tags[tag]) {
+        // eslint-disable-next-line security/detect-object-injection -- key is safe.
         tags[tag] = 0
+      }
+
+      // eslint-disable-next-line security/detect-object-injection -- key is safe.
       tags[tag] += 1
       return tags
     }, {})

package.json

@@ -87,8 +87,8 @@
     "unist-util-visit": "^5.0.0"
   },
   "devDependencies": {
-    "@dg-scripts/eslint-config": "^5.19.0",
-    "@dg-scripts/stylelint-config": "^5.19.0",
+    "@dg-scripts/eslint-config": "^5.20.1",
+    "@dg-scripts/stylelint-config": "^5.20.1",
     "@octokit/types": "^12.6.0",
     "@testing-library/jest-dom": "^6.4.2",
     "@testing-library/react": "^14.2.2",