Allow HTTP scheme for localhost URLs

recommended_ruleset.js

@@ -19,7 +19,7 @@ module.exports = {
         "no-eval": true,
         "no-exec-script": true,
         "no-function-constructor-with-string-args": true,
-        "no-http-string": [true, "http://www.example.com/?.*", "http://www.examples.com/?.*"],
+        "no-http-string": [true, "http://www.example.com/?.*", "http://www.examples.com/?.*", "http://localhost:?.*"],
         "no-inner-html": true,
         "no-octal-literal": true,
         "no-reserved-keywords": true,
@@ -263,4 +263,3 @@ module.exports = {
         "valid-typeof": false,
     }
 };
-

src/noHttpStringRule.ts

@@ -24,7 +24,7 @@ export class Rule extends Lint.Rules.AbstractRule {
         severity: 'Critical',
         level: 'Mandatory',
         group: 'Security',
-        recommendation: '[true, "http://www.example.com/?.*", "http://www.examples.com/?.*"],',
+        recommendation: '[true, "http://www.example.com/?.*", "http://www.examples.com/?.*", "http://localhost:?.*"],',
         commonWeaknessEnumeration: '319'
     };