Security fixes

eslint.config.cjs

@@ -0,0 +1,34 @@
+const js = require('@eslint/js');
+
+module.exports = [
+  {
+    ignores: ['node_modules/**'],
+  },
+  js.configs.recommended,
+  {
+    files: ['tests/**/*.js'],
+    languageOptions: {
+      globals: {
+        describe: 'readonly',
+        it: 'readonly',
+        expect: 'readonly',
+        vi: 'readonly',
+        beforeEach: 'readonly',
+        afterEach: 'readonly',
+      },
+    },
+  },
+  {
+    files: ['**/*.js'],
+    languageOptions: {
+      ecmaVersion: 2022,
+      sourceType: 'commonjs',
+    },
+    rules: {
+      indent: ['error', 4, { SwitchCase: 1 }],
+      curly: 'error',
+      eqeqeq: ['error', 'always'],
+      'no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
+    },
+  },
+];

index.js

@@ -37,7 +37,7 @@ module.exports = function( source ) {
 
     for ( let key in dict ) {
 
-        if ( !dict.hasOwnProperty( key ) ) {
+        if ( !Object.hasOwn( dict, key ) ) {
             continue;
         }
 

lib/filters/bem.js

@@ -21,7 +21,7 @@ class BemFilter extends BaseFilter {
             .join(' ');
     }
 
-    _setOrAddAttr( text, tag, attrName, attrDef, condFn ) { // eslint-disable-line max-params
+    _setOrAddAttr( text, tag, attrName, attrDef, condFn ) {
         const tagRe = new RegExp( `<(${tag})\\b([^/>]*)`, 'g' );
 
         return text.replace( tagRe, ( match, tag, attrs ) => {
@@ -63,7 +63,7 @@ class BemFilter extends BaseFilter {
 
                     for ( let tag in classes ) {
 
-                        if ( !classes.hasOwnProperty( tag ) ) {
+                        if ( !Object.hasOwn( classes, tag ) ) {
                             continue;
                         }
 
@@ -77,11 +77,11 @@ class BemFilter extends BaseFilter {
 
                     for ( let tag in attrs ) {
 
-                        if ( !attrs.hasOwnProperty( tag ) ) {
+                        if ( !Object.hasOwn( attrs, tag ) ) {
                             continue;
                         }
 
-                        Object.keys( attrs[tag] ).forEach( attrName => { // eslint-disable-line no-loop-func
+                        Object.keys( attrs[tag] ).forEach( attrName => {
                             res = this._setOrAddAttr( res, tag, attrName, attrs[tag][attrName] );
                         } );
                     }

lib/filters/plugins/babelfish.js

@@ -17,7 +17,7 @@ module.exports = function( md ) {
                 return token.type === 'paragraph_open'; 
             } ).length;
 
-            if ( pLength == 1 && ( type === 'paragraph_open' || type === 'paragraph_close' ) ) {
+            if ( pLength === 1 && ( type === 'paragraph_open' || type === 'paragraph_close' ) ) {
                 return '';
             }
 

lib/flatten.js

@@ -6,7 +6,7 @@ function process( obj, prefix, storage ) {
 
     for ( let key in obj ) {
 
-        if ( !obj.hasOwnProperty( key ) ) {
+        if ( !Object.hasOwn( obj, key ) ) {
             continue;
         }