Files
codeql/javascript/ql/test/query-tests/Security/CWE-022/TaintedPath/prettier.js
2021-06-02 15:33:08 +02:00

15 lines
448 B
JavaScript

const express = require('express');
const prettier = require("prettier");
const app = express();
app.get('/some/path', function (req, res) {
const { p } = req.params;
prettier.resolveConfig(p).then((options) => { // NOT OK
const formatted = prettier.format("foo", options);
});
prettier.resolveConfig("foo", {config: p}).then((options) => { // NOT OK
const formatted = prettier.format("bar", options);
});
});