secure-pubspec-urls
Same as secure_pubspec_urls in Dart lints
- Group
- Security
- Path
cross-file/security/secure-pubspec-urls- Default
- On (recommended)
- Origin
- Dart lints
- Rule
- 432 of 512
Cross-file rule. It runs in falcon's whole-project pass, analyzing relationships across every file rather than one file at a time. Configure it under the top-level cross-file key.
Disallow insecure URL schemes in pubspec.yaml string values.
Invalid
void main() {}No diagnostics in this file.
Configure secure-pubspec-urls
Set its severity in falcon.json under the cross-file section. See the configuration guide.
{
"cross-file": {
"rules": {
"security": {
"secure-pubspec-urls": "error"
}
}
}
}Or silence one occurrence with a suppression comment; the reason is required.
// falcon-ignore cross-file/security/secure-pubspec-urls: <reason>More security rules
- avoid-hardcoded-credentials
Warns when credential-like variables, fields, or parameter defaults use nonempty string or numeric literals.
- avoid-sensitive-query-params
Detect explicit secret-bearing URL query keys, not arbitrary occurrences of words such as
tokenin paths, fragments, map values, or prose. - avoid-weak-cryptographic-algorithmsrecommended
Flags references to MD5, SHA-1, DES, triple DES, and RC4 package APIs.
- prefer-random-secure
Prefer the cryptographically secure
dart:mathrandom generator.