Rules / Eslint / SafetyNo Script URLDisallow javascript colon URLs except for explicitly allowed patterns such as javascript void zero to prevent cross-site scripting.Read article →