Files
codeql/javascript/ql/test/query-tests/Security/CWE-312/CleartextStorage.js
2025-02-28 13:29:37 +01:00

8 lines
345 B
JavaScript

var express = require('express');
var app = express();
app.get('/remember-password', function (req, res) {
let pw = req.param("current_password"); // $ Source[js/clear-text-storage-of-sensitive-data]
res.cookie("password", pw); // $ Alert[js/clear-text-storage-of-sensitive-data] - Setting a cookie value with cleartext sensitive data.
});