Files
codeql/javascript/ql/test/query-tests/Security/CWE-312/CleartextStorage2.js
2025-02-28 13:29:30 +01:00

11 lines
377 B
JavaScript

var https = require('https');
var url = require('url');
var server = https.createServer(function(req, res) {
let pw = url.parse(req.url, true).query.current_password; // $ Source[js/clear-text-storage-of-sensitive-data]
res.writeHead(200, {
'Set-Cookie': 'password=' + pw, // $ Alert[js/clear-text-storage-of-sensitive-data]
'Content-Type': 'text/plain'
});
});