Skip to content


Subversion checkout URL

You can clone with
Download ZIP
100755 694 lines (653 sloc) 38.563 kB
ca120a7 @douglascrockford first commit
1 <html>
2 <head>
3 <title>JSLint: The JavaScript Code Quality Tool</title>
4 <link rel="icon" type="image/gif" href="">
5 <style>
6 body {
7 background-color: linen;
8 margin-left: 8%;
9 margin-right: 8%;
10 }
11 pre {margin-left: 40px;}
12 table {margin: 10px; border: 0px;}
13 th, td {border: black solid 1pt; padding-left: 10px;
14 padding-right: 10px; vertical-align: top;}
15 th {
16 background-color: thistle;
17 }
18 td {
19 background-color: white;
20 }
21 #top table {margin: 0px;}
22 #top td {background-color: linen; border: 0pt; vertical-align: middle;}
23 ul {list-style-type: square;}
24 input[type="button"] {border: 2px solid black;}
25 a:link {color: darkblue;}
26 a:visited {color: purple;}
27 a:hover {color: blue; text-decoration: underline;}
28 a:active {color: red;}
29 </style>
30 </head>
31 <body bgcolor="gainsboro">
32 <table id="top" border="0">
33 <tr>
34 <td><img src="jslint.gif" width="383" height="120" alt="JSLint"> </td>
35 <td>
36 <p><big><code>JSLint</code>: The
37 <a href="">JavaScript</a> Code Quality Tool</big></p>
38 <p><a href="" target="_top">&copy;2002 Douglas Crockford</a></p>
39 </td>
40 </tr>
41 </table>
42 <br clear="all">
43 <h2 id=warning>Warning!</h2>
44 <p><a href="" target="_blank"><code>JSLint</code></a>
45 will hurt your feelings.</p>
46 <h2 id=what>What is <code>JSLint</code>?</h2>
48 <p><a href="" target="_blank"><code>JSLint</code></a>
49 is a JavaScript program that looks for problems in JavaScript programs.
50 It is a code quality tool.</p>
52 <p>When <a href="">C</a>
53 was a <a href="">young</a>
54 programming language, there were several common programming errors that
55 were not caught by the primitive compilers, so an accessory program called
56 <code><a href="">lint</a></code>
57 was developed that would scan a source file, looking for problems.</p>
59 <p>As the language matured, the definition of the language was
60 strengthened to eliminate some insecurities, and compilers got better
61 at issuing warnings. <code>lint</code> is no longer needed.</p>
63 <p><a href="">JavaScript</a> is a young-for-its-age
64 language. It was originally intended to do small tasks in webpages, tasks
65 for which Java was too heavy and clumsy. But JavaScript is a very capable
66 language, and it is now being used in larger projects. Many of the features
6735394 @douglascrockford Cleanup.
67 that were intended to make the language easy to use are troublesome when projects become complicated. A <code>lint</code> for JavaScript is needed: <a href=""><code>JSLint</code></a>,
ca120a7 @douglascrockford first commit
68 a JavaScript syntax checker and validator.</p>
70 <p><code>JSLint</code> takes a JavaScript source and scans it. If it finds
71 a problem, it returns a message describing the problem and an approximate
72 location within the source. The problem is not necessarily a syntax error,
73 although it often is. <code>JSLint</code> looks at some style conventions
74 as well as structural problems. It does not prove that your program is
75 correct. It just provides another set of eyes to help spot problems.</p>
77 <p><code>JSLint</code> defines a professional subset of JavaScript, a stricter
78 language than that defined by <a href="" target="ecma">Third
79 Edition of the <i>ECMAScript Programming Language Standard</i></a>. The
80 subset is related to recommendations found in <a href="" target="sun"><i>Code
81 Conventions for the JavaScript Programming Language</i></a>. </p>
82 <p>JavaScript is a sloppy language, but inside it there is an elegant, better
83 language. <code>JSLint</code> helps you to program in that better language
6735394 @douglascrockford Cleanup.
84 and to avoid most of the slop. JSLint will reject programs that browsers will accept because JSLint is concerned with the quality of your code and browsers are not. You should accept all of JSLint's advice.</p>
85 <p><code>JSLint</code> can operate on JavaScript source, HTML source, CSS source, or <a href="">JSON</a>
ca120a7 @douglascrockford first commit
86 text.</p>
87 <h2 id=global>Global Variables</h2>
88 <p>JavaScript's <a href="">biggest
89 problem</a> is its dependence on global variables, particularly implied
90 global variables. If a variable is not explicitly declared (usually with
91 the <code>var</code> statement), then JavaScript assumes that the variable
92 was global. This can mask misspelled names and other problems.</p>
93 <p><code>JSLint</code> expects that all variables and functions are declared
94 before they are used or invoked. This allows it to detect implied global
95 variables. It is also good practice because it makes programs easier to
96 read.</p>
97 <p>Sometimes a file is dependent on global variables and functions that
98 are defined elsewhere. You can identify these to <code>JSLint</code> with a <code>var</code> statement that lists the global functions and objects
99 that your program depends on. </p>
100 <p>A global declaration can look like this:</p>
101 <pre>var getElementByAttribute, breakCycles, hanoi;</pre>
102 <p>The declaration should appears near the top of the file. It must appear before the use of the variables
103 it declares. </p>
104 <p>It is necessary to use a <code>var</code> statement to declare a variable before that variable is assigned to. </p>
6735394 @douglascrockford Cleanup.
105 <p><code>JSLint</code> also recognizes a <code>/*global */</code> comment that can indicate to <code>JSLint</code> that variables used in this file were defined in other files. The comment can contain a comma separated list of names. Each name can optionally be followed by a colon and either <code>true</code> or <code>false</code>, <code>true</code> indicated that the variable may be assigned to by this file, and <code>false</code> indicating that assignment is not allowed (which is the default).</p>
ca120a7 @douglascrockford first commit
106 <p id=browser>Some globals can be predefined for you. Select the <i>Assume
107 a browser</i> (<code>browser</code>) <a href="#options">option</a> to
108 predefine the standard global properties that are supplied by web browsers,
109 such as <code>document</code> and <code>addEventListener</code>. It has the same
110 effect as this comment:</p>
111 <blockquote>
112 <code>/*global addEventListener: false, blur: false, clearInterval: false, clearTimeout: false, close: false, closed: false, defaultStatus: false, document: false, event: false, focus: false, frames: false, getComputedStyle: false, history: false, Image: false, length: false, location: false, moveBy: false, moveTo: false, name: false, navigator: false, onblur: true, onerror: true, onfocus: true, onload: true, onresize: true, onunload: true, open: false, opener: false, Option: false, parent: false, print: false, resizeBy: false, resizeTo: false, screen: false, scroll: false, scrollBy: false, scrollTo: false, setInterval: false, setTimeout: false, status: false, top: false, XMLHttpRequest: false */</code></blockquote>
113 <p> The <code>browser</code> <a href="#options">option</a> does
114 not include the aliases of the global object, <code>window</code> and
6735394 @douglascrockford Cleanup.
115 <code>self</code> because the potential for misuse is so great.</p>
ca120a7 @douglascrockford first commit
116 <p id=devel>Select the
117 <label for="JSLINT_DEVEL" title="devel"><em>Assume console, alert, ...</em></label>
118 (<code>devel</code>) <a href="#options">option</a> to predefine globals that are useful in development but that should be avoided in production, such as <code>console</code> and <code>alert</code>. It has the same
119 effect as this comment:</p>
120 <pre>/*global alert: false, confirm: false, console: false, Debug: false, opera: false, prompt: false */</pre>
121 <p id=rhino>Select the <i>Assume Rhino</i> (<code>rhino</code>) <a href="#options">option</a>
122 to predefine the global properties provided by the Rhino environment.
123 It has the same effect as this statement:</p>
124 <blockquote>
125 <code>/*global defineClass: false, deserialize: false, gc: false, help: false, load: false, loadClass: false, print: false, quit: false, readFile: false, readUrl: false, runCommand: false, seal: false, serialize: false, spawn: false, sync: false, toint32: false, version: false */ </code>
126 </blockquote>
127 <p id=widget>Select the <i>Assume a Yahoo Widget</i> (<code>widget</code>)
128 <a href="#options">option</a> to predefine the global properties provided
129 by the Yahoo! Widgets environment. It has the same effect as this statement:</p>
130 <blockquote>
131 <code>/*global alert: true, animator: true, appleScript: true, beep: true, bytesToUIString: true, Canvas: true, chooseColor: true, chooseFile: true, chooseFolder: true, closeWidget: true, COM: true, convertPathToHFS: true, convertPathToPlatform: true, CustomAnimation: true, escape: true, FadeAnimation: true, filesystem: true, Flash: true, focusWidget: true, form: true, FormField: true, Frame: true, HotKey: true, Image: true, include: true, isApplicationRunning: true, iTunes: true, konfabulatorVersion: true, log: true, md5: true, MenuItem: true, MoveAnimation: true, openURL: true, play: true, Point: true, popupMenu: true, preferenceGroups: true, preferences: true, print: true, prompt: true, random: true, Rectangle: true, reloadWidget: true, ResizeAnimation: true, resolvePath: true, resumeUpdates: true, RotateAnimation: true, runCommand: true, runCommandInBg: true, saveAs: true, savePreferences: true, screen: true, ScrollBar: true, showWidgetPreferences: true, sleep: true, speak: true, Style: true, suppressUpdates: true, system: true, tellWidget: true, Text: true, TextArea: true, Timer: true, unescape: true, updateNow: true, URL: true, Web: true, widget: true, Window: true, XMLDOM: true, XMLHttpRequest: true, yahooCheckLogin: true, yahooLogin: true, yahooLogout: true */</code>
132 </blockquote>
133 <p id=windows>Select the <i>Assume Windows</i> (<code>windows</code>)
134 <a href="#options">option</a> to predefine the global properties provided by Microsoft Windows. It has the same effect as this statement:</p>
135 <blockquote>
136 <p><code>/*global ActiveXObject: false, CScript: false, Debug: false, Enumerator: false, System: false, VBArray: false, WScript: false */</code></p>
137 </blockquote>
138 <h2 id=semicolon>Semicolon</h2>
6735394 @douglascrockford Cleanup.
139 <p>JavaScript uses a C-like syntax which requires the use of semicolons to delimit certain
140 statements. JavaScript attempts to make those semicolons optional with a semicolon
141 insertion mechanism. This is dangerous because it can mask errors.</p>
ca120a7 @douglascrockford first commit
142 <p>Like C, JavaScript has <code>++</code> and <code>--</code> and <code>(</code> operators
143 which can be prefixes or suffixes. The disambiguation is done by the semicolon.</p>
144 <p>In JavaScript, a linefeed can be whitespace or it can act as a semicolon.
145 This replaces one ambiguity with another. </p>
146 <p><code>JSLint</code> expects that every statement be followed by <code>;</code> except
147 for <code>for</code>, <code>function</code>, <code>if</code>, <code>switch</code>, <code>try</code>, and
148 <code>while</code>. <code>JSLint</code> does not expect to see unnecessary semicolons or the
149 empty statement.</p>
150 <h2 id=comma>Comma</h2>
151 <p>The comma operator can lead to excessively tricky expressions. It can also
152 mask some programming errors.</p>
153 <p><code>JSLint</code> expects to see the comma used as a separator, but not as an
154 operator (except in the initialization and incrementation parts of the <code>for</code>
155 statement). It does not expect to see elided elements in array literals. Extra
156 commas should not be used. A comma should not appear after the last element
157 of an array literal or object literal because it can be misinterpreted by some
158 browsers. </p>
159 <h2 id=scope>Scope</h2>
161 <p>In many languages, a block introduces a scope. Variables introduced in
162 a block are not visible outside of the block.</p>
164 <p>In JavaScript, blocks do not introduce a scope. There is only function-scope.
165 A variable introduced anywhere in a function is visible everywhere in
166 the function. JavaScript's blocks confuse experienced programmers and
167 lead to errors because the familiar syntax makes a false promise.</p>
169 <p><code>JSLint</code> expects blocks with <code>function</code>, <code>if</code>,
170 <code>switch</code>, <code>while</code>, <code>for</code>, <code>do</code>,
171 and <code>try</code> statements and nowhere else. </p>
172 <p>In languages with block scope, it is usually recommended that variables
173 be declared at the site of first use. But because JavaScript does not
174 have block scope, it is wiser to declare all of a function's variables
175 at the top of the function. It is recommended that a single <code>var</code>
176 statement be used per function. This can be enforced with the <code>onevar</code>
177 <a href="#options">option</a>.</p>
179 <h2 id=required>Required Blocks</h2>
181 <p><code>JSLint</code> expects that <code>if</code>, <code>while</code>,
182 <code>do</code> and <code>for</code> statements will be made with blocks
183 <code>{</code>that is, with statements enclosed in braces<code>}</code>.</p>
185 <p>JavaScript allows an <code>if</code> to be written like this:</p>
187 <pre>if (<i>condition</i><code>)
188 </code><i>statement</i>;</pre>
190 <p>That form is known to contribute to mistakes in projects where many programmers
191 are working on the same code. That is why <code>JSLint</code> expects the use of
192 a block:</p>
194 <pre>if (<i>condition</i>) {
195 <i>statements</i>;
196 }</pre>
198 <p>Experience shows that this form is more resilient.</p>
200 <h2 id=expression>Expression Statements</h2>
201 <p>An expression statement is expected to be an assignment or a function/method
202 call or <code>delete</code>. All other expression statements are considered
203 to be errors.</p>
204 <h2 id=forin><code>for</code> <code>in</code></h2>
205 <p>The <code>for</code> <code>in</code> statement allows for looping through
206 the names of all of the properties of an object. <a href="">Unfortunately,
207 it also loops through all of the members which were inherited through
208 the prototype chain.</a> This has the bad side effect of serving up method
6735394 @douglascrockford Cleanup.
209 functions when the interest is in data members. If a program is written without awareness of this situation, then it can fail.</p>
ca120a7 @douglascrockford first commit
210 <p>The body of every <code>for</code> <code>in</code> statement should be
211 wrapped in an <code>if</code> statement that does filtering. It can select
212 for a particular type or range of values, or it can exclude functions,
213 or it can exclude properties from the prototype. For example,</p>
214 <pre>for (name in object) {
215 if (object.hasOwnProperty(name)) {
216 ....
217 }
219 }</pre>
221 <h2 id=switch><code>switch</code></h2>
222 <p>A <a href="">common
223 error</a> in <code>switch</code> statements is to forget to place a <code>break</code>
224 statement after each case, resulting in unintended fall-through. <code>JSLint</code>
225 expects that the statement before the next <code>case</code> or <code>default</code>
226 is one of these: <code>break</code>, <code>return</code>, or <code>throw</code>.
227 </p>
228 <h2 id=var><code>var</code></h2>
230 <p>JavaScript allows <code>var</code> definitions to occur anywhere
231 within a function. <code>JSLint</code> is more strict.</p>
233 <p><code>JSLint</code> expects that a <code>var</code> will be declared
234 only once, and that it will be declared before it is used.</p>
235 <p><code></code><code>JSLint</code> expects that a <code>function</code>
236 will be declared before it is used.</p>
237 <p><code>JSLint</code> expects that parameters will not also be declared
238 as vars. </p>
240 <p><code>JSLint</code> does not expect the <code>arguments</code> array to be declared
241 as a <code>var</code>.</p>
242 <p><code>JSLint</code> does not expect that a var will be defined in a block.
243 This is because JavaScript blocks do not have block scope. This can have
244 unexpected consequences. Define all variables at the top of the function.</p>
246 <h2 id=with><code>with</code></h2>
248 <p>The <code>with</code> statement was intended to provide a shorthand in accessing
249 members in deeply nested objects. Unfortunately, it behaves <a href="">very
250 badly</a> when setting new members. Never use the <code>with</code> statement. Use
251 a <code>var</code> instead.</p>
253 <p><code>JSLint</code> does not expect to see a <code>with</code> statement.</p>
255 <h2 id=assignment>=</h2>
256 <p><code>JSLint</code> does not expect to see an assignment statement in
257 the condition part of an <code>if</code> or <code>for</code> or <code>while</code>
258 <code></code> or <code>do</code> statement. This is because it is more
259 likely that </p>
260 <pre>if (a = b) {
261 ...
262 }</pre>
263 <p>was intended to be </p>
264 <pre>if (a == b) {
265 ...
266 }</pre>
267 <p>It is difficult to write correct programs while using idioms that are
9d80d80 @douglascrockford asignment unwrapped
268 hard to distinguish from obvious errors.</p>
ca120a7 @douglascrockford first commit
269 <h2 id=equal>== and !=</h2>
270 <p>The <code>==</code> and <code>!=</code> operators do type coercion before
271 comparing. This is bad because it causes <code>' \t\r\n' == 0</code> to
272 be <code>true</code>. This can mask type errors.</p>
273 <p>When comparing to any of the following values, use the <code>===</code>
274 or <code>!==</code> operators (which do not do type coercion): <code>0
275 '' undefined null false true</code></p>
276 <p align="left">If you only care that a value is <i>truthy</i> or <i>falsy</i>,
277 then use the short form. Instead of </p>
278 <pre align="left">(foo != 0)</pre>
279 <p align="left">just say </p>
280 <pre align="left">(foo)</pre>
281 <p align="left">and instead of</p>
282 <pre align="left">(foo == 0)</pre>
283 <p align="left"> say</p>
284 <pre align="left">(!foo)</pre>
5675d2c @douglascrockford
285 <p>Always use the <code>===</code> and <code>!==</code> operators. </p>
ca120a7 @douglascrockford first commit
286 <h2 id=labels>Labels</h2>
287 <p>JavaScript allows any statement to have a label, and labels have a
288 separate name space. <code>JSLint</code> is more strict.</p>
290 <p><code>JSLint</code> expects labels only on statements that interact
291 with <code>break</code>: <code>switch</code>, <code>while</code>,
292 <code>do</code>, and <code>for</code>. <code>JSLint</code> expects that labels
293 will be distinct from vars and parameters.</p>
295 <h2 id=unreachable>Unreachable Code</h2>
296 <p><code>JSLint</code> expects that
297 a <code>return</code>, <code>break</code>, <code>continue</code>,
298 or <code>throw</code> statement will be followed by
299 a <code>}</code> or <code>case</code> or <code>default</code>.</p>
301 <h2 id=pluses>Confusing Pluses and Minuses</h2>
303 <p><code>JSLint</code> expects that <code>+</code> will not be followed by
304 <code>+</code> or <code>++</code>, and that <code>-</code> will not be followed
305 by <code>-</code> or <code>--</code>. A misplaced space can turn <code>+ +</code> into <code>++</code>, an error that is difficult to see. Use parens to avoid confusion..</p>
306 <h2 id=inc><code>++</code> and <code>--</code></h2>
307 <p>The <code>++</code> <small>(increment)</small> and <code>--</code> <small>(decrement)</small>
308 operators have been known to contribute to bad code by encouraging excessive
309 trickiness. They are second only to faulty architecture in enabling to
310 viruses and other security menaces. There is a <code>plusplus</code> <a href="#options">option</a>
311 that prohibits the use of these operators.</p>
312 <h2 id=bitwise>Bitwise Operators</h2>
313 <p>JavaScript does not have an integer type, but it does have bitwise operators.
314 The bitwise operators convert their operands from floating point to integers
315 and back, so they are not as efficient as in C or other languages. They
316 are rarely useful in browser applications. The similarity to the logical
317 operators can mask some programming errors. The <code>bitwise</code> <a href="#options">option</a>
318 prohibits the use of these operators: <code>&lt;&lt; &gt;&gt; &gt;&gt;&gt;
319 ~ &amp; |</code>.</p>
320 <h2 id=evil><code>eval</code> is evil</h2>
321 <p>The <code>eval</code> function (and its relatives, <code>Function</code>,
322 <code>setTimeout</code>, and <code>setInterval</code>) provide access
323 to the JavaScript compiler. This is sometimes necessary, but in most cases
324 it indicates the presence of extremely bad coding. The <code>eval</code>
325 function is the most misused feature of JavaScript.</p>
327 <h2 id=void><code>void</code></h2>
328 <p>In most C-like languages, <code>void</code> is a type. In
329 JavaScript, <code>void</code> is a prefix operator that always
330 returns <code>undefined</code>. <code>JSLint</code> does not expect to
331 see <code>void</code> because it is confusing and not very useful.</p>
333 <h2 id=regexp>Regular Expressions</h2>
334 <p>Regular expressions are written in a terse and cryptic notation. <code>JSLint</code>
335 looks for problems that may cause portability problems. It also attempts
336 to resolve visual ambiguities by recommending explicit escapement.</p>
337 <p>JavaScript's syntax for regular expression literals overloads the <code>/</code>
338 character. To avoid ambiguity, <code>JSLint</code> expects that the character
339 preceding a regular expression literal is a <code>(</code> or <code>=</code>
340 or <code>:</code> or <code>,</code> character. </p>
341 <h2 id=new>Constructors and <code>new</code></h2>
342 <p>Constructors are functions that are designed to be used with the <code>new</code>
343 prefix. The <code>new</code> prefix creates a new object based on the
344 function's <code>prototype</code>, and binds that object to the function's
345 implied <code>this</code> parameter. If you neglect to use the <code>new</code>
346 prefix, no new object will be made and <code>this</code> will be bound
347 to the global object. This is a <a href="">serious
348 mistake</a>.</p>
349 <p><code>JSLint</code> enforces the convention that constructor functions
350 be given names with initial uppercase. <code>JSLint</code> does not expect
351 to see a function invocation with an initial uppercase name unless it
352 has the <code>new</code> prefix. <code>JSLint</code> does not expect to
353 see the <code>new</code> prefix used with functions whose names do not
354 start with initial uppercase. This can be controlled with the <code>newcap</code>
355 <a href="#options">option</a>.</p>
356 <p><code>JSLint</code> does not expect to see the wrapper forms <code>new Number</code>,
357 <code>new String</code>, <code>new Boolean</code>. </p>
358 <p><code>JSLint</code> does not expect to see <code>new Object</code> (use <code>{}</code>
359 instead). </p>
360 <p><code>JSLint</code> does not expect to see <code>new Array</code> (use <code>[]</code>
361 instead).</p>
362 <h2 id=unsafe>Unsafe Characters</h2>
363 <p> There are characters that are handled inconsistently in browsers, and
364 so must be escaped when placed in strings. </p>
365 <pre>\u0000-\u001f
366 \u007f-\u009f
367 \u00ad
368 \u0600-\u0604
369 \u070f
370 \u17b4
371 \u17b5
372 \u200c-\u200f
373 \u2028-\u202f
374 \u2060-\u206f
375 \ufeff
376 \ufff0-\uffff</pre>
377 <h2 id=not>Not Looked For</h2>
379 <p><code>JSLint</code> does not do flow analysis to determine that variables are assigned
380 values before used. This is because variables are given a value (<code>undefined</code>)
6735394 @douglascrockford Cleanup.
381 that is a reasonable default for many applications.</p>
ca120a7 @douglascrockford first commit
383 <p><code>JSLint</code> does not do any kind of global analysis. It does
384 not attempt to determine that functions used with <code>new</code> are
385 really constructors (<a href="#new">except by enforcing capitalization
386 conventions</a>), or that property names are spelled correctly (<a href="#members">except
387 for matching against the <code>/*members */</code> comment</a>).</p>
388 <h2 id=html>HTML</h2>
389 <p><code>JSLint</code> is able to handle HTML text. It can inspect the JavaScript content
390 contained within <code>&lt;script&gt;</code>...<code>&lt;/script&gt;</code> tags. It
391 also inspects the HTML content, looking for problems that are known to interfere
392 with JavaScript:</p>
393 <ul>
394 <li>All tag names must be in lower case.</li>
395 <li>All tags that can take a close tag (such as <code>&lt;/p&gt;</code>)
396 must have a close tag.</li>
397 <li>All tags are correctly nested.</li>
398 <li>The entity <code>&amp;lt;</code> must be used for literal <code>'&lt;'</code>.</li>
399 </ul>
400 <p><code>JSLint</code> is less anal than the sycophantic conformity demanded
401 by XHTML, but more strict than the popular browsers. </p>
402 <p><code>JSLint</code> also checks for the occurrence of<code> '&lt;/' </code>in
403 string literals. You should always write<code> '&lt;\/' </code>instead.
404 The extra backslash is ignored by the JavaScript compiler but not by the
405 HTML parser. Tricks like this should not be necessary, and yet they are.</p>
406 <p>There is a <code>cap</code> <a href="#options">option</a> that allows
407 use of upper case tag names. There is also an <code>on</code> <a href="#options">option</a>
408 that allows the use of inline HTML event handlers.</p>
409 <p>There is a <code>fragment</code> <a href="#options">option</a> that can
410 inspect a well formed HTML fragment. If the <code>adsafe</code> <a href="#options">option</a>
411 is also used, then the fragment must be a <code>&lt;div&gt;</code> that
412 conforms to the <a href="">ADsafe</a> widget rules.</p>
413 <h2 id=css>CSS</h2>
414 <p><code>JSLint</code> can inspect CSS files. It expects the first line
415 of a CSS file to be </p>
416 <pre>@charset &quot;UTF-8&quot;;</pre>
417 <p>This feature is experimental. Please report any problems or limitations.
418 There is a <code>css</code> <a href="#options">option</a> that will tolerate
419 some of the non-standard-but-customary workarounds. <br>
420 </p>
422 <h2 id=options>Options</h2>
423 <p><code>JSLint</code> provides several options that control its operation and
424 its sensitivity. In the <a href="">web edition</a>, the
425 options are selected with several checkboxes and two fields. Clicking on
426 the <a href=""
427 target="_blank"><input type="button" value="Good Parts"></a> button will give
428 you the ideal settings.
429 </p>
430 <p>It also provides assistance in constructing <code>/*jslint*/</code>
432 </p>
433 <p>When <code>JSLINT</code> is called as a function, it accepts an <code>option</code> object
434 parameter that allows you to determine the subset of JavaScript that is
435 acceptable to you. The web page version of <code>JSLint</code> at <a href=""></a>
436 does this for you. </p>
437 <p>Options can also be specified within a script with a <code>/*jslint */</code>
438 comment:</p>
439 <pre>/*jslint nomen: true, debug: true,
440 evil: false, onevar: true */</pre>
441 <p>An option specification starts with <code>/*jslint</code>. Notice that
442 there is no space before the <code>j</code>. The specification contains
443 a sequence of name value pairs, where the names are <code>JSLint</code>
444 options, and the values are <code>true</code> or <code>false</code>. The
445 <code>indent</code> <a href="#options">option</a> can take a number. A <code>/*jslint */</code>
446 comment takes precedence over the <code>option</code> object. </p>
447 <table>
448 <tbody>
449 <tr>
450 <th>Description</th>
451 <th><code>option</code></th>
452 <th>Meaning</th>
453 </tr>
454 <tr>
455 <td>ADsafe</td>
456 <td><code>adsafe</code></td>
457 <td><code>true</code> if <a href="">AD<span style="color: blue;">safe</span></a>
458 rules should be enforced. See <a href=""></a>.</td>
459 </tr>
460 <tr>
461 <td>Disallow bitwise operators </td>
462 <td><code>bitwise</code></td>
463 <td><code>true</code> if bitwise operators should not be allowed. <a href="#bitwise"><small>(more)</small></a></td>
464 </tr>
465 <tr>
466 <td>Assume a browser </td>
467 <td><code>browser</code></td>
468 <td><code>true</code> if the standard browser globals should be predefined.
469 <a href="#browser"><small>(more)</small></a> </td>
470 </tr>
471 <tr>
472 <td>Tolerate HTML case </td>
473 <td><code>cap</code></td>
474 <td><code>true</code> if upper case HTML should be allowed.</td>
475 </tr>
476 <tr>
477 <td>Tolerate CSS workarounds</td>
478 <td><code>css</code></td>
479 <td><code>true</code> if CSS workarounds should be tolerated. <a href="#css"><small>(more)</small></a></td>
480 </tr>
481 <tr>
482 <td>Tolerate debugger statements</td>
483 <td><code>debug</code></td>
484 <td><code>true</code> if <code>debugger</code> statements should be
485 allowed. Set this option to <code>false</code> before going into production.</td>
486 </tr>
487 <tr>
488 <td>Assume <code>console</code>, <code>alert</code>, ...</td>
489 <td><code>devel</code></td>
490 <td><code>true</code> if browser globals that are useful in development should be
491 predefined. (<a href="#devel">more</a>)</td>
492 </tr>
493 <tr>
5675d2c @douglascrockford
494 <td>Tolerate ES5 syntax</td>
495 <td><code>es5</code></td>
40e3f73 @douglascrockford It
496 <td><code>true</code> if ES5 syntax should be allowed.</a> It is likely that programs using this option will produce syntax errors on ES3 systems.</td>
ca120a7 @douglascrockford first commit
497 </tr>
498 <tr>
499 <td>Tolerate <code>eval</code> </td>
500 <td><code>evil</code></td>
501 <td><code>true</code> if <code>eval</code> should be allowed. <a href="#evil"><small>(more)</small></a></td>
502 </tr>
503 <tr>
504 <td>Tolerate unfiltered for in </td>
505 <td><code>forin</code></td>
506 <td><code>true</code> if unfiltered <code>for</code> <code>in</code>
507 statements should be allowed. <a href="#forin"><small>(more)</small></a></td>
508 </tr>
509 <tr>
510 <td>Tolerate HTML fragments </td>
511 <td><code>fragment</code></td>
512 <td><code>true</code> if HTML fragments should be allowed. <a href="#html"><small>(more)</small></a></td>
513 </tr>
514 <tr>
5675d2c @douglascrockford
515 <td>Strict white space indentation</td>
516 <td><code>indent</code></td>
dedfd85 @douglascrockford option.indent
517 <td>The number of spaces used for indentation (default is 4). If 0, then no indentation checking takes place.</td>
ca120a7 @douglascrockford first commit
518 </tr>
519 <tr>
5675d2c @douglascrockford
520 <td>Maximum number of errors</td>
521 <td><code>maxerr</code></td>
522 <td>The maximum number of warnings reported (default is 50)</td>
ca120a7 @douglascrockford first commit
523 </tr>
524 <tr>
525 <td>Maximum line length</td>
526 <td><code>maxlen</code></td>
527 <td>The maximum number of characters in a line</td>
528 </tr>
529 <tr>
530 <td>Disallow dangling _ in identifiers </td>
531 <td><code>nomen</code></td>
532 <td><code>true</code> if names should be checked for initial or trailing underbars</td>
533 </tr>
534 <tr>
535 <td>Require Initial Caps for constructors </td>
536 <td><code>newcap</code></td>
537 <td><code>true</code> if Initial Caps must be used with constructor
538 functions. <a href="#new"><small>(more)</small></a></td>
539 </tr>
540 <tr>
541 <td>Tolerate HTML event handlers </td>
542 <td><code>on</code></td>
543 <td><code>true</code> if HTML event handlers should be allowed. <a href="#html"><small>(more)</small></a></td>
544 </tr>
545 <tr>
546 <td>Allow one <code>var</code> statement per function</td>
547 <td><code>onevar</code></td>
548 <td><code>true</code> if only one <code>var</code> statement per function
549 should be allowed. <a href="#scope"><small>(more)</small></a></td>
550 </tr>
551 <tr>
552 <td>Stop on first error </td>
553 <td><code>passfail</code></td>
554 <td><code>true</code> if the scan should stop on first error.</td>
555 </tr>
556 <tr>
557 <td>Disallow <code>++</code> and <code>--</code> </td>
558 <td><code>plusplus</code></td>
559 <td><code>true</code> if <code>++</code> and <code>--</code> should
560 not be allowed. <a href="#inc"><small>(more)</small></a></td>
561 </tr>
562 <tr>
563 <td>Predefined <small>( , separated)</small></td>
564 <td><code>predef</code></td>
6735394 @douglascrockford Cleanup.
565 <td>An array of strings, the names of predefined global variables, or an object whose keys are global variable names, and whose values are booleans that determine if each variable is assignable (also see <a href="#global">global</a>). <code>predef</code> is used with the <code>option</code> object, but not
00d8d1f @douglascrockford option.predef
566 with the <code>/*jslint */</code> comment. You can also use the <code>var</code>
ca120a7 @douglascrockford first commit
567 statement to declare global variables in a script file.</td>
568 </tr>
569 <tr>
8d1c4eb @douglascrockford clarification
570 <td>Disallow <code>.</code> and <code>[^</code>...<code>]</code>. in /RegExp/ </td>
ca120a7 @douglascrockford first commit
571 <td><code>regexp</code></td>
572 <td><code>true</code> if <code>.</code> and <code>[^</code>...<code>]</code> should not be allowed in RegExp
8d1c4eb @douglascrockford clarification
573 literals. They match more material than might be expected, allowing attackers to confuse applications. These forms should not be used when validating in secure applications. </td>
ca120a7 @douglascrockford first commit
574 </tr>
575 <tr>
576 <td>Assume Rhino </td>
577 <td><code>rhino</code></td>
578 <td><code>true</code> if the <a href="">Rhino</a>
579 environment globals should be predefined. <a href="#rhino"><small>(more)</small></a></td>
580 </tr>
581 <tr>
582 <td>Safe Subset </td>
583 <td><code>safe</code></td>
584 <td><code>true</code> if the safe subset rules are enforced. These rules
585 are used by <a href="">ADsafe</a>. It enforces
586 the safe subset rules but not the widget structure rules.</td>
587 </tr>
588 <tr>
589 <td>Require <code>&quot;use strict&quot;;</code> </td>
590 <td><code>strict</code></td>
caa8885 @douglascrockford use strict
591 <td><code>true</code> if the ES5 <code><a href="">"use strict";</a></code> pragma
ca120a7 @douglascrockford first commit
592 is required. Do not use this option carelessly.</td>
593 </tr>
594 <tr>
595 <td>Tolerate inefficient subscripting<br>
596 </td>
597 <td><code>sub</code></td>
598 <td><code>true</code> if subscript notation may be used for expressions
599 better expressed in dot notation.</td>
600 </tr>
601 <tr>
602 <td>Disallow undefined variables </td>
603 <td><code>undef</code></td>
604 <td><code>true</code> if variables must be declared before used. <a href="#undefined"><small>(more)</small></a></td>
605 </tr>
606 <tr>
607 <td>Strict white space </td>
608 <td><code>white</code></td>
609 <td><code>true</code> if strict whitespace rules apply.</td>
610 </tr>
611 <tr>
612 <td>Assume a Yahoo Widget </td>
613 <td><code>widget</code></td>
614 <td><code>true</code> if the <a href="">Yahoo
615 Widgets</a> globals should be predefined. <a href="#widget"><small>(more)</small></a></td>
616 </tr>
617 <tr>
618 <td>AssumeWindows</td>
619 <td><code>windows</code></td>
620 <td><code>true</code> if the Windows</a> globals should be predefined. <a href="#windows"><small>(more)</small></a></td>
621 </tr>
622 </tbody>
623 </table>
624 <h2 id=members>Members</h2>
625 <p>Since JavaScript is a loosely-typed, dynamic-object language, it is not
626 possible to determine at compile time if property names are spelled correctly.
627 <code>JSLint</code> provides some assistance with this.</p>
628 <p>At the bottom of its report, <code>JSLint</code> displays a <code>/*members*/</code>
629 comment. It contains all of the names and string literals that were used
630 with dot notation, subscript notation, and object literals to name the
631 members of objects. You can look through the list for misspellings. Member
632 names that were only used once are shown in italics. This is to make misspellings
633 easier to spot.</p>
634 <p>You can copy the <code>/*members*/</code> comment into your script file.
635 <code>JSLint</code> will check the spelling of all property names against
636 the list. That way, you can have <code>JSLint</code> look for misspellings
637 for you.</p>
638 <h2 id=report>Report</h2>
640 <p>If <code>JSLint</code> is able to complete its scan, it generates a function
641 report. It lists for each function:</p>
643 <ul>
644 <li>The line number on which it starts.</li>
645 <li>Its name. In the case of anonymous functions, <code>JSLint</code>
646 will &quot;guess&quot; the name.</li>
647 <li>The parameters.</li>
648 <li><i>Closure</i>: The variables and parameters that are declared in
649 the function that are used by its inner functions.</li>
650 <li><i>Variables</i>: The variables that are declared in the function
651 that are used only by the function.</li>
652 <li><i>Exceptions</i>: The variables that are declared by try statements.</li>
653 <li><i>Unused</i>: The variables that are declared in the function that
654 are not used. This may be an indication of an error.</li>
655 <li><i>Outer</i>: Variables used by this function that are declared in
656 another function.</li>
657 <li><i>Global</i>: Global variables that are used by this function. Keep
658 these to a minimum.</li>
659 <li><i>Label</i>: Statement labels that are used by this function.</li>
660 </ul>
661 <p>The report will also include a list of all of the <a href="#members">member
662 names</a> that were used. There is a <a href="msgs.html">list of <code>JSLint</code>
663 messages</a>.</p>
664 <h2 id=feedback>Feedback</h2>
665 <p>Please let me know if <code>JSLint</code> is useful for you. Is it too
666 strict? Is there a check or a report that could help you to improve the
667 quality of your programs? <a href=""></a></p>
669 <p>I intend to continue to adapt <code>JSLint</code> based on your comments.
670 Keep watching for improvements. Updates are announced at <a href=""></a>.</p>
672 <h2 id=try>Try it</h2>
674 <p><a href="" target="_blank">Try it.</a> Paste your script
675 into the window and click the
676 <a href="" target=jslint><input type="button" value="JSLint"></a>
677 button. The analysis is done by a script running on your machine.
678 Your script is not sent over the network. You can set the options used.
679 The <a href=""
680 target="_blank"><input type="button" value="Good Parts"></a> button in the
681 Options area will preset the best options for you.
bdd3576 @douglascrockford k
682 </p>
683 <p>
684 JSLint is written entirely in JavaScript, so it can run anywhere that JavaScript can run. See for example <a href="">;tbl=1</a>.</p>
ca120a7 @douglascrockford first commit
685 <h2 id=implementation>Implementation</h2>
686 <p><code>JSLint</code> uses a <a href="">Pratt
687 Parser (Top Down Operator Precedence)</a>. It is written in JavaScript.
35ec4a5 @douglascrockford groove
688 The full source code is available: <a href=""></a>.</p>
ca120a7 @douglascrockford first commit
689 <a href=""><img src="jslintpill.gif" width="36" height="17" border="0"></a>
690 <a href=""><img src="adsafepill.gif" width="36" height="17" border="0"></a>
691 <a href=""><img src="jsonpill.gif" width="36" height="17" border="0"></a>
692 </body>
693 </html>
Something went wrong with that request. Please try again.