Files
codeql/javascript/ql/test/query-tests/Security/CWE-643/tst.js
2025-02-28 13:29:30 +01:00

13 lines
366 B
JavaScript

const express = require('express');
const xpath = require('xpath');
const app = express();
app.get('/some/route', function(req, res) {
let tainted = req.param("userName"); // $ Source
xpath.parse(tainted); // $ Alert
xpath.select(tainted); // $ Alert
xpath.select1(tainted); // $ Alert
let expr = xpath.useNamespaces(map);
expr(tainted); // $ Alert
});