Files
codeql/javascript/ql/test/query-tests/Security/CWE-400/src-non-vulnerable-lodash/tst.js
2019-05-27 22:32:32 +02:00

9 lines
165 B
JavaScript

let express = require('express');
let _ = require('lodash');
let app = express();
app.get('/hello', function(req, res) {
_.merge({}, req.query.foo); // OK
});