Files
codeql/javascript/ql/test/query-tests/Security/CWE-352/MissingCsrfMiddlewareBad.js
2020-01-23 14:59:03 +00:00

13 lines
300 B
JavaScript

var express = require('express')
var cookieParser = require('cookie-parser')
var passport = require('passport')
var app = express()
app.use(cookieParser())
app.use(passport.authorize({ session: true }))
app.post('/changeEmail', function (req, res) {
let newEmail = req.cookies["newEmail"];
})