Files
codeql/javascript/ql/test/query-tests/Security/CWE-918/clientSideParam.js
2021-03-16 13:28:09 +00:00

11 lines
359 B
JavaScript

import * as React from "react";
import { useParams } from "react-router-dom";
import request from 'request';
export function MyComponent() {
const params = useParams();
request('https://example.com/api/' + params.foo + '/id'); // OK - cannot manipulate path using `../`
request(params.foo); // Possibly problematic, but not currently flagged.
}