mirror of
https://github.com/github/codeql.git
synced 2025-12-20 18:56:32 +01:00
9 lines
276 B
JavaScript
9 lines
276 B
JavaScript
const express = require('express');
|
|
const libxmljs = require('libxmljs');
|
|
|
|
express().get('/some/path', function(req) {
|
|
// NOT OK: the SAX parser expands external entities by default
|
|
const parser = new libxmljs.SaxParser();
|
|
parser.parseString(req.param("some-xml"));
|
|
});
|