mirror of
https://github.com/github/codeql.git
synced 2025-12-18 01:33:15 +01:00
13 lines
326 B
JavaScript
13 lines
326 B
JavaScript
let express = require('express');
|
|
let isVarName = require('is-var-name');
|
|
let app = express();
|
|
|
|
app.get("/some/path", (req, res) => {
|
|
let response = "Hello, world!";
|
|
|
|
if(req.query.jsonp && isVarName(req.query.jsonp))
|
|
response = req.query.jsonp + "(" + response + ")"; // $ Source
|
|
|
|
res.send(response); // $ Alert
|
|
});
|