diff --git a/test/html-sinks.test.ts b/test/html-sinks.test.ts index b34e1b5..7a487d1 100644 --- a/test/html-sinks.test.ts +++ b/test/html-sinks.test.ts @@ -22,7 +22,8 @@ describe('html sinks', () => { const text = readFileSync(file, 'utf8') const rel = relative(SRC, file) if (text.includes('dangerouslySetInnerHTML')) hits.push(`${rel}: dangerouslySetInnerHTML`) - if (/innerHTML\s*=\s*(?!['"]['"])/.test(text)) hits.push(`${rel}: innerHTML`) + // 空白放进前瞻里,避免 \s* 回退到空格前面、把 innerHTML = '' 误判成写入。 + if (/innerHTML\s*=(?!\s*['"]['"])/.test(text)) hits.push(`${rel}: innerHTML`) } expect(hits).toEqual([]) })