Files
codeql/javascript/ql/test/query-tests/Security/CWE-730/RegExpInjectionGood.js
2025-02-28 13:27:28 +01:00

12 lines
340 B
JavaScript

var express = require('express');
var _ = require('lodash');
var app = express();
app.get('/findKey', function(req, res) {
var key = req.param("key"), input = req.param("input");
// OK - User input is sanitized before constructing the regex
var safeKey = _.escapeRegExp(key);
var re = new RegExp("\\b" + safeKey + "=(.*)\n");
});