Files
codeql/javascript/ql/test/query-tests/Security/CWE-022/tainted-sendFile.js
2018-08-02 17:53:23 +01:00

9 lines
204 B
JavaScript

var express = require('express');
var app = express();
app.get('/some/path', function(req, res) {
// BAD: sending a file based on un-sanitized query parameters
res.sendFile(req.param("gimme"));
});