hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Add support for rateLimit export from express-rate-limit package.

Browse Source
This commit is contained in:
Max Schaefer
2023-10-26 12:12:16 +01:00
parent 28bedda5ea
commit bb146a1758
4 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/test/query-tests/Security/CWE-770/MissingRateLimit/tst3.js Normal file
View File

@@ -0,0 +1,10 @@
import express from "express";
import { rateLimit } from "express-rate-limit";
const app = express();
const limiter = rateLimit();
app.use(limiter)
function expensiveHandler(req, res) { login(); }
app.get('/:path', expensiveHandler); // OK

10
javascript/ql/test/query-tests/Security/CWE-770/MissingRateLimit/tst4.js Normal file
View File

@@ -0,0 +1,10 @@
import express from "express";
import rateLimit from "express-rate-limit";
const app = express();
const limiter = rateLimit();
app.use(limiter)
function expensiveHandler(req, res) { login(); }
app.get('/:path', expensiveHandler); // OK