Files
codeql/rust/ql/test/query-tests/security/CWE-079/axum/main.rs
Simon Friis Vindum 0f4561efc3 Rust: Add XSS examples
2025-11-24 15:46:23 +01:00

20 lines
600 B
Rust

use axum::{extract::Query, response::Html, routing::get, Router};
#[derive(serde::Deserialize)]
struct GreetingParams {
name: String,
}
async fn greet_handler(Query(params): Query<GreetingParams>) -> Html<String> {
let html_content = format!("<p>Hello, {}!</p>", params.name);
Html(html_content) // $ MISSING: Alert[rust/xss]
}
#[tokio::main]
pub async fn main() {
let app = Router::<()>::new().route("/greet", get(greet_handler));
let listener = tokio::net::TcpListener::bind("127.0.0.1:3000")
.await
.unwrap();
axum::serve(listener, app).await.unwrap();
}