mirror of
https://github.com/github/codeql.git
synced 2026-04-28 10:15:14 +02:00
committed by
GitHub
parent
63e637503d
commit
95fae8155e
@@ -46,7 +46,7 @@ app.get('/rest/user/change-password', mkHandler());
|
||||
|
||||
function mkHandler() {
|
||||
return (req, res) => {
|
||||
const username = req.param('username'); // NOT OK - usernames are fine
|
||||
const username = req.param('username'); // OK - usernames are fine
|
||||
const currentPassword = req.param('current'); // NOT OK - password read
|
||||
checkUser(username, currentPassword, (result) => {
|
||||
res.send(result);
|
||||
|
||||
Reference in New Issue
Block a user