mirror of
https://github.com/github/codeql.git
synced 2025-12-18 01:33:15 +01:00
28 lines
1.5 KiB
JavaScript
28 lines
1.5 KiB
JavaScript
const jsyaml = require("js-yaml");
|
|
|
|
var express = require('express');
|
|
var app = express();
|
|
app.post('/store/:id', function(req, res) {
|
|
let data;
|
|
data = jsyaml.load(req.params.data); // OK
|
|
data = jsyaml.loadAll(req.params.data); // OK
|
|
data = jsyaml.safeLoad(req.params.data); // OK
|
|
data = jsyaml.safeLoadAll(req.params.data); // OK
|
|
|
|
let unsafeConfig = { schema: jsyaml.DEFAULT_FULL_SCHEMA };
|
|
data = jsyaml.load(req.params.data, unsafeConfig); // NOT OK
|
|
data = jsyaml.loadAll(req.params.data, unsafeConfig); // NOT OK
|
|
data = jsyaml.safeLoad(req.params.data, unsafeConfig); // NOT OK
|
|
data = jsyaml.safeLoadAll(req.params.data, unsafeConfig); // NOT OK
|
|
|
|
data = jsyaml.load(req.params.data, { schema: jsyaml.DEFAULT_SCHEMA }); // OK
|
|
|
|
data = jsyaml.load(req.params.data, { schema: jsyaml.DEFAULT_SCHEMA.extend(require('js-yaml-js-types').all) }); // NOT OK
|
|
data = jsyaml.load(req.params.data, { schema: jsyaml.DEFAULT_SCHEMA.extend(require('js-yaml-js-types').function) }); // NOT OK
|
|
data = jsyaml.load(req.params.data, { schema: jsyaml.DEFAULT_SCHEMA.extend(require('js-yaml-js-types').undefined) }); // OK
|
|
|
|
data = jsyaml.load(req.params.data, { schema: require('js-yaml-js-types').all.extend(jsyaml.DEFAULT_SCHEMA) }); // NOT OK
|
|
data = jsyaml.load(req.params.data, { schema: require('js-yaml-js-types').function.extend(jsyaml.DEFAULT_SCHEMA) }); // NOT OK
|
|
data = jsyaml.load(req.params.data, { schema: require('js-yaml-js-types').undefined.extend(jsyaml.DEFAULT_SCHEMA) }); // OK
|
|
});
|