hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: recognize Express headers as RequestInputAccess

Browse Source
This commit is contained in:
Asger F
2018-09-21 18:37:03 +01:00
parent 7f56be6fe2
commit ce11b5330d
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/test/library-tests/frameworks/Express/src/express.js
View File

@@ -42,3 +42,9 @@ function getArrowHandler() {
return (req, res) => f();
}
app.use(getArrowHandler());
app.post('/headers', function(req, res) {
req.headers.baz;
req.host;
req.hostname;
});