mirror of
https://github.com/github/codeql.git
synced 2026-05-02 04:05:14 +02:00
fix comment in passport test
Co-Authored-By: Esben Sparre Andreasen <42067045+esben-semmle@users.noreply.github.com>
This commit is contained in:
@@ -25,5 +25,5 @@ passport.use(new twitter.Strategy({
|
||||
callbackURL : "baz",
|
||||
passReqToCallback : true
|
||||
}, function(req, accessToken, refreshToken, profile, done) {
|
||||
req.body; // Tainted value! passReqToCallback is set to true. Treated similarly to the req argument from Express.
|
||||
}));
|
||||
req.body; // `passReqToCallback` is `true`, so `req` is assumed to be an Express request object, causing this to be a `RequestInputAccss`
|
||||
}));
|
||||
|
||||
Reference in New Issue
Block a user