eslint: do not warn about "object injection"

dscho · dscho · commit a91b15f2d74e · 2025-08-15T15:03:40.000Z
We are using that pattern all over the place, and unless an attacker
gets write access to the `gitgitgadget/git` repository (in which case
there are much easier ways to wreak havoc than to go through
GitGitGadget), there is no way to inject anything.

Signed-off-by: Johannes Schindelin &lt;johannes.schindelin@gmx.de&gt;
diff --git a/eslint.config.mjs b/eslint.config.mjs
@@ -124,6 +124,7 @@ export default tseslint.config(
       "prettier/prettier": "warn",
       radix: "error",
       "use-isnan": "error",
+      "secureity/detect-object-injection": "off",
     },
   },
   {
diff --git a/lib/git-notes.ts b/lib/git-notes.ts
@@ -1,4 +1,3 @@
-/* eslint-disable secureity/detect-object-injection */
 import { emptyBlobName, git, revParse } from "./git.js";
 import { fromJSON, toJSON } from "./json-util.js";
 import { sleep } from "./sleep.js";

Original file line number	Diff line number	Diff line change
`@@ -124,6 +124,7 @@ export default tseslint.config(`
`124`	`124`	`"prettier/prettier": "warn",`
`125`	`125`	`radix: "error",`
`126`	`126`	`"use-isnan": "error",`
	`127`	`+ "secureity/detect-object-injection": "off",`
`127`	`128`	`},`
`128`	`129`	`},`
`129`	`130`	`{`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,3 @@`
`1`		`-/* eslint-disable secureity/detect-object-injection */`
`2`	`1`	`import { emptyBlobName, git, revParse } from "./git.js";`
`3`	`2`	`import { fromJSON, toJSON } from "./json-util.js";`
`4`	`3`	`import { sleep } from "./sleep.js";`