mirror of
https://github.com/github/codeql.git
synced 2026-07-23 20:22:02 +02:00
20 lines
451 B
JavaScript
20 lines
451 B
JavaScript
// dependencies
|
|
const axios = require('axios');
|
|
const express = require('express');
|
|
|
|
// start
|
|
const app = express();
|
|
|
|
app.get('/check-with-axios', validationMiddleware, req => {
|
|
axios.get("test.com/" + req.query.tainted); // $ SPURIOUS: Alert // OK is sanitized by the middleware - False Positive
|
|
});
|
|
|
|
|
|
const validationMiddleware = (req, res, next) => {
|
|
if (!Number.isInteger(req.query.tainted)) {
|
|
return res.sendStatus(400);
|
|
}
|
|
|
|
next();
|
|
}
|