Registry / testing / lint-target-blank

lint-target-blank

library0.1.1jsnpmunverified

A lightweight linting tool for detecting the target="_blank" vulnerability in HTML anchor tags where missing rel="noopener noreferrer" allows the opened page to access the opener's window via window.opener. The package provides a simple API to parse HTML strings and return errors for insecure links. It is at version 0.1.1 with a minimal footprint and no dependencies. Compared to full-fledged HTML validators or linters like ESLint plugins, this is a focused, single-purpose module for quick checks during development or build processes.

testing

npm install lint-target-blank

github ↗package ↗

INSTALL

IMPORT

SIG · LINT-TARGET-BLANK

lint-target-blank

testingjavascriptv0.1.1

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

LintTargetBlank

✓ const LintTargetBlank = require('lint-target-blank');

✗ import LintTargetBlank from 'lint-target-blank';

Package uses CommonJS require; no ESM exports are provided.

LintTargetBlank instance

✓ const lintTargetBlank = new LintTargetBlank({});

✗ const lintTargetBlank = new LintTargetBlank();

Constructor expects an options object; passing no argument may cause undefined errors.

lint method

✓ const errors = lintTargetBlank.lint(htmlString);

✗ const errors = lintTargetBlank.lint(htmlString, callback);

The lint method is synchronous and returns an array of error objects directly, not via callback.

Shows how to require the module, create an instance, and lint an HTML string for insecure target="_blank" links.

const LintTargetBlank = require('lint-target-blank'); const lintTargetBlank = new LintTargetBlank({}); const html = ` <div> <a href="https://example.com" target="_blank">Click</a> </div>`; const errors = lintTargetBlank.lint(html); console.log(errors); // Output: // [ { line: 2, column: 16, message: 'Missing rel="noopener noreferrer" on target="_blank" link' } ]

Debug

Known issues

gotchaThe constructor expects an options object; calling `new LintTargetBlank()` without arguments may cause runtime errors if internal code accesses properties.

fix

Always pass an empty object `{}` or an options object with configuration.

affects: 0.1.0 - 0.1.1

gotchaThe `lint` method returns an array of error objects, not a boolean or count. New users may expect a different return format.

fix

Iterate over the returned array to access individual errors.

affects: all

gotchaThe package does not parse real HTML; it uses a regex-based approach that may produce false positives or miss edge cases (e.g., dynamic attributes).

fix

Consider using a proper HTML parser (e.g., cheerio) for more accurate linting.

affects: all

Errors

Common errors & fixes

TypeError: LintTargetBlank is not a constructor

Using ES module import syntax with a CommonJS package.

fix

Use `const LintTargetBlank = require('lint-target-blank');` instead of `import`.

Cannot read property 'length' of undefined

Calling `lint()` without an argument or with undefined.

fix

Always pass a string to the `lint` method.

Upgrade

Version history

0.1.1latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

4 hits · last 30 days

node

Resources

githubhttps://github.com/chilliwilly77/lint-target-blank ↗

packagehttps://www.npmjs.com/package/lint-target-blank ↗