tslint.json

{
  /**
   * tslint.json configures tslint options
   *
   * Note: tslint allows single-line (//) and multi-line comments even if it's
   * technically not valid json
   */
  "extends": ["tslint:recommended", "tslint-react"],
  "rulesDirectory": ["tslint-microsoft-contrib", "tslint-plugin-prettier"],
  "rules": {
    /**
     * create-react-app. These are defaults from create-react-app. Formatting rules
     * were removed as prettier will handle that.
     */
    "ban-types": false,
    "function-constructor": true,
    "interface-name": [true, "never-prefix"],
    "jsx-no-lambda": false,
    "jsx-no-multiline-js": false,
    "jsx-curly-brace-presence": [true, "never"],
    "member-access": [true, "no-public"],
    "member-ordering": [true, {"order": "fields-first"}],
    "no-console": false,
    "no-switch-case-fall-through": true,
    "object-literal-sort-keys": false,
    "ordered-imports": false,
    "prettier": [true, ".prettierrc"],
    "quotemark": [true, "single", "jsx-double", "avoid-escape"],
    "semicolon": [true, "always", "ignore-bound-class-methods"],
    "switch-default": true,
    "typedef": [true, "parameter", "property-declaration"],
    "trailing-comma": [true, {"esSpecCompliant": true}],
    "variable-name": [
      true,
      "ban-keywords",
      "check-format",
      "allow-leading-underscore",
      "allow-pascal-case"
    ],

    /**
     * Accessibility. The following rules should be turned on to guarantee the best user
     * experience for keyboard and screen reader users.
     */
    "react-a11y-aria-unsupported-elements": true,
    "react-a11y-event-has-role": true,
    "react-a11y-image-button-has-alt": true,
    "react-a11y-img-has-alt": true,
    "react-a11y-lang": true,
    "react-a11y-meta": true,
    "react-a11y-props": true,
    "react-a11y-proptypes": true,
    "react-a11y-role": true,
    "react-a11y-role-has-required-aria-props": true,
    "react-a11y-role-supports-aria-props": true,
    "react-a11y-tabindex-no-positive": true,
    "react-a11y-titles": true,

    /**
     * Security Rules. The following rules should be turned on because they find security issues
     * or are recommended in the Microsoft Secure Development Lifecycle (SDL)
     */
    "insecure-random": true,
    "no-banned-terms": true,
    "no-cookies": true,
    "no-delete-expression": true,
    "no-disable-auto-sanitization": true,
    "no-document-domain": true,
    "no-document-write": true,
    "no-empty": false,
    "no-eval": true,
    "no-exec-script": true,
    "no-http-string": [
      true,
      "http://www.example.com/?.*",
      "http://www.examples.com/?.*"
    ],
    "no-inner-html": true,
    "no-octal-literal": true,
    "no-string-based-set-immediate": true,
    "no-string-based-set-interval": true,
    "no-string-based-set-timeout": true,
    "non-literal-require": true,
    "possible-timing-attack": true,
    "react-anchor-blank-noopener": true,
    "react-iframe-missing-sandbox": true,
    "react-no-dangerous-html": true,

    /**
     * Prettier. The following rules interfere with prettier
     */
    "jsx-wrap-multiline": false,
    "jsx-alignment": false,
    "jsx-curly-spacing": false,
    "jsx-equals-spacing": false,
    "object-literal-key-quotes": false,

    "ban-types": true,
    "jsx-boolean-value": [true, "never"]
  }
}