Files
codeql/javascript/ql/test/query-tests/Security/CWE-200/lib/tst.js
2020-06-08 23:41:14 +02:00

11 lines
280 B
JavaScript

var express = require('express');
var path = require("path");
var app = express();
app.use('basedir', express.static(__dirname)); // BAD
const rootDir = __dirname;
app.use('basedir', express.static(rootDir)); // BAD
app.use('/monthly', express.static(__dirname + '/')); // BAD