feat(compiler): SYN027 — warn on bare postMessage() cross-origin messaging bypass (?bs 0.7+, closes #180)#182

Open

marcelofarias wants to merge 5 commits into

mainfrom

botkowski/syn027-postmessage

Commits on Jun 19, 2026

feat(compiler): SYN027 — warn on bare postMessage() that bypasses the capability model (?bs 0.7+, closes #180)

authored and
Marcelo Farias
committed
fix(SYN027): extend detection to window/globalThis/self.postMessage; import messaging example

Marcelo Farias
authored and
Marcelo Farias
committed
fix(compiler): address Copilot SYN027 review — accurate message for ambient-global forms, numeric ordering in registry and MCP, updated AGENTS.md

authored and
Marcelo Farias
committed
fix(compiler): address Copilot SYN027 review — hoist AMBIENT_GLOBALS_27, fix ternary false negative, add generator test

authored and
Marcelo Farias
committed
fix(syn027): address Copilot review — accurate message wording and unsafe-wrap form

authored and
Marcelo Farias
committed