Files
codeql/javascript/ql/test/query-tests/Security/CWE-200/readStreamRead.js
2018-10-01 11:45:38 -07:00

38 lines
922 B
JavaScript

// adopted from https://stackoverflow.com/questions/6158933/how-to-make-an-http-post-request-in-node-js
const fs = require('fs');
var http = require('http');
var fileName = "foo.txt";
fs.exists(fileName, function (exists) {
if (exists) {
fs.stat(fileName, function (error, stats) {
var readable = fs.createReadStream(fileName);
readable.on('readable', () => {
let chunk = readable.read();
const options = {
hostname: 'www.google.com',
port: 80,
path: '/upload',
method: 'POST',
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
}
};
const req = http.request(options, (res) => {
res.setEncoding('utf8');
});
// BAD: write data from file to request body
req.write(chunk);
req.end();
});
fs.close(fd);
});
}
});