Forbidden kernel WRITE
forbidden_kernel_write
Description
Forbid WRITE '@KERNEL' outside the listed objects
Extended Information
The transpiler emits the literal of WRITE '@KERNEL ...' as raw JavaScript,
which runs with the privileges of the host. Open-abap uses this for its kernel classes, code compiled by a host it did not write should not.
allow is a list of regex, case insensitive, matched against the object name, eg. ["^CL_", "^KERNEL_"].
An empty list, the default, allows every object. To forbid WRITE '@KERNEL' everywhere use a regex matching no name, eg. ["^$"].