---
schema_version: "1"
id: 375488d6df08f0c87ea6c84bf09353404da640cb772fbb20eb932073e90139e3
title: Validate JavaScript Intrinsic APIs (ecma-intrinsics)
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/platform/aura-platform/guides/aura/cli/cli-rules-ecma-intrinsic.md
canonical_url: https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-ecma-intrinsic.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 05da4ddfdea8fc1cbaa6d6771e60c4ba67c787f96bae6cf31c9b7c0936c3b5d7
products:
  - Lightning Aura Components Developer Guide
  - Platform Developer Content
---

# Validate JavaScript Intrinsic APIs (ecma-intrinsics)

This rule deals with the intrinsic APIs in JavaScript, more formally known as ECMAScript.

When Lightning Locker is enabled, the framework prevents the use of unsupported API objects or calls. That means your Aura components code is allowed to use:

- Features built into JavaScript (“intrinsic” features)
- Published, supported features built into the Aura Components programming model.
- Published, supported features built into Lightning Locker _SecureObject_ objects

What exactly are these “intrinsic APIs”? They’re the APIs defined in the [ECMAScript Language Specification](https://tc39.github.io/ecma262/). That is, things built into JavaScript. This includes Annex B of the specification, which deals with legacy browser features that aren’t part of the “core” of JavaScript, but are nevertheless still supported for JavaScript running inside a web browser.

Note that some features of JavaScript that you might consider intrinsic—for example, the `window` and `document` global variables—are superceded by _SecureObject_ objects, which offer a more constrained API.

## Rule Details

This rule verifies that use of the intrinsic JavaScript APIs is according to the published specification. The use of non-standard, deprecated, and removed language features is disallowed.

## Further Reading

- [ECMAScript specification](https://tc39.github.io/ecma262/)
- [Annex B: Additional ECMAScript Features for Web Browsers](https://tc39.github.io/ecma262/#sec-additional-built-in-properties)
- [Intrinsic Objects (JavaScript)](https://developer.salesforce.com/docs/platform/aura-platform/guide/%3Chttps://msdn.microsoft.com/en-us/library/4zx5dkc9(v=vs.94).aspx>)

**See Also**

- [Validate Aura API (aura-api)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-aura-api.md)
- [Validate Aura Component Public API (secure-component)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-component.md)
- [Validate Secure Document Public API (secure-document)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-document.md)
- [Validate Secure Window Public API (secure-window)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-window.md)