mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
13 lines
407 B
JavaScript
13 lines
407 B
JavaScript
var express = require('express'),
|
|
Module = require('module');
|
|
|
|
var app = express();
|
|
|
|
app.get('/some/path', function (req, res) {
|
|
let filename = req.query.filename;
|
|
var m = new Module(filename, module.parent);
|
|
m._compile(req.query.code, filename); // $ Alert[js/code-injection]
|
|
var m2 = new module.constructor;
|
|
m2._compile(req.query.code, filename); // $ Alert[js/code-injection]
|
|
});
|