initial commit of actions

github/codeql-action-v2/node_modules/eslint-plugin-github/lib/rules/no-inner-html.js

@@ -0,0 +1,21 @@
+module.exports = {
+  meta: {
+    type: 'problem',
+    docs: {
+      description: 'disallow `Element.prototype.innerHTML` in favor of `Element.prototype.textContent`',
+      url: require('../url')(module),
+    },
+    schema: [],
+  },
+
+  create(context) {
+    return {
+      'MemberExpression[property.name=innerHTML]': function (node) {
+        context.report({
+          node: node.property,
+          message: 'Using innerHTML poses a potential security risk and should not be used. Prefer using textContent.',
+        })
+      },
+    }
+  },
+}