From: Tom Hughes <tom@compton.nu>
Date: Sun, 31 Mar 2019 18:06:59 +0000 (+0100)
Subject: Use erb-lint to prohibit inline scripting
X-Git-Tag: live~2639
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/2fb4497c6c07514644c78f61a611fd6275bf1051?ds=sidebyside

Use erb-lint to prohibit inline scripting
---

diff --git a/.erb-lint.yml b/.erb-lint.yml
index c78bcd178..812a6f538 100644
--- a/.erb-lint.yml
+++ b/.erb-lint.yml
@@ -1,9 +1,8 @@
 ---
 linters:
-  SelfClosingTag:
-    enabled: false
-  SpaceInHtmlTag:
+  AllowedScriptType:
     enabled: true
+    disallow_inline_scripts: true
   Rubocop:
     enabled: true
     rubocop_config:
@@ -25,5 +24,9 @@ linters:
         Enabled: false
       Rails/OutputSafety:
         Enabled: false
+  SelfClosingTag:
+    enabled: false
+  SpaceInHtmlTag:
+    enabled: true
 exclude:
   - '**/vendor/**'