Files
codeql/javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/formatting.js
2025-02-28 13:29:30 +01:00

9 lines
331 B
JavaScript

var express = require('express');
express().get('/user/', function(req, res) {
var evil = req.query.evil; // $ Source
res.send(console.log("<div>%s</div>", evil)); // OK - returns undefined
res.send(util.format("<div>%s</div>", evil)); // $ Alert
res.send(require("printf")("<div>%s</div>", evil)); // $ Alert
});