Files
codeql/javascript/ql/test/query-tests/Security/CWE-834/LoopBoundInjectionObviousLengthCheck.js
2025-02-28 13:27:28 +01:00

23 lines
383 B
JavaScript

'use strict';
var express = require('express');
var router = new express.Router();
var rootRoute = router.route('foobar');
rootRoute.post(function(req, res) {
problem(req.body);
});
function problem(val) {
var ret = [];
// Prevents DoS
if (val.length > 100) {
return [];
}
for (var i = 0; i < val.length; i++) {
ret.push(val[i]);
}
}