Files
codeql/javascript/ql/test/query-tests/Security/CWE-312/CleartextStorage.js
2018-08-02 17:53:23 +01:00

9 lines
227 B
JavaScript

var express = require('express');
var app = express();
app.get('/', function (req, res) {
let a = req.param("AccountName");
// BAD: Setting a cookie value with cleartext sensitive data.
res.cookie("AccountName", a);
});