ajinabraham.njsscan.good.good_helmet_checks.helmet_header_check_expect_ct

rules:
  - id: helmet_header_check_expect_ct
    message: "Expect-CT header is present. More information:
      https://helmetjs.github.io/docs/expect-ct/"
    languages:
      - javascript
    severity: INFO
    patterns:
      - pattern-not: |
          $HELMET(..., {expectCt: false}, ...)
      - pattern-either:
          - pattern: |
              expectCt({maxAge: ...,})
          - pattern: |
              helmet.expectCt({maxAge: ...,})
          - pattern: |
              expectCt({enforce: ...,})
          - pattern: |
              hemlet.expectCt({enforce: ...,})
          - pattern: |
              helmet({expectCt: { enforce: ... }})
    metadata:
      license: LGPL-3.0-or-later