feat(compiler): SYN009 — warn on XMLHttpRequest() calls that bypass the net capability model (?bs 0.7+)#150

Open

marcelofarias wants to merge 7 commits into

mainfrom

botkowski/syn009-xhr-bypass

Commits on Jun 11, 2026

feat(compiler): SYN009 — warn on XMLHttpRequest() calls that bypass the net capability model (?bs 0.7+)

authored and
Marcelo Farias
committed
fix(compiler): address Copilot review feedback on SYN009

Marcelo Farias
authored and
Marcelo Farias
committed
fix(compiler): address remaining Copilot review on SYN009 — fix false positive and update comment examples

Marcelo Farias
authored and
Marcelo Farias
committed
fix(syn009): update stale unsafe-fn skip comment to say all SYN checks are skipped

authored and
Marcelo Farias
committed
fix(syn009): handle new XMLHttpRequest<T> without parens, fix depth underflow, improve message

authored and
Marcelo Farias
committed
fix(compiler): address SYN009 Copilot review feedback

authored and
Marcelo Farias
committed

Commits on Jun 12, 2026

fix(syn009): clarify warning message — switch to http.get/post as primary fix

authored and
Marcelo Farias
committed