Skip to content

feat: security hardening across WMP client library - #19

Merged
leifj merged 8 commits into
mainfrom
feat/security-hardening-2026-07-21
Jul 22, 2026
Merged

leifj merged 8 commits into
mainfrom
feat/security-hardening-2026-07-21

fix: expose invitationNonce in Peer.createSession()

9cf81e9
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Jul 22, 2026 in 39s

Annotations

Check warning on line 45 in src/native.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Mark these members as `readonly`.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-FmCTo28PW_-Mg8pdg&open=AZ-FmCTo28PW_-Mg8pdg&pullRequest=19

Check warning on line 47 in src/jsonrpc.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTQT4G2-8WKA7Z_4&open=AZ-EsTQT4G2-8WKA7Z_4&pullRequest=19

Check warning on line 48 in src/jsonrpc.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTQT4G2-8WKA7Z_5&open=AZ-EsTQT4G2-8WKA7Z_5&pullRequest=19

Check warning on line 46 in src/jsonrpc.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String.fromCodePoint()` over `String.fromCharCode()`.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTQT4G2-8WKA7Z_3&open=AZ-EsTQT4G2-8WKA7Z_3&pullRequest=19

Check warning on line 49 in src/jsonrpc.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTQT4G2-8WKA7Z_6&open=AZ-EsTQT4G2-8WKA7Z_6&pullRequest=19

Check warning on line 117 in src/jsonrpc.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use 'Object.hasOwn()' instead of 'Object.prototype.hasOwnProperty.call()'.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTQT4G2-8WKA7Z_7&open=AZ-EsTQT4G2-8WKA7Z_7&pullRequest=19

Check warning on line 148 in src/peer.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Consider removing 'undefined' type or '?' specifier, one of them is redundant.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTUB4G2-8WKA7Z_9&open=AZ-EsTUB4G2-8WKA7Z_9&pullRequest=19

Check warning on line 149 in src/peer.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Consider removing 'undefined' type or '?' specifier, one of them is redundant.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTUB4G2-8WKA7Z_-&open=AZ-EsTUB4G2-8WKA7Z_-&pullRequest=19

Check warning on line 450 in src/openid4x.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Mark these members as `readonly`.

See more on https://sonarcloud.io/project/issues?id=sirosfoundation_wmp-js&issues=AZ-EsTTM4G2-8WKA7Z_8&open=AZ-EsTTM4G2-8WKA7Z_8&pullRequest=19