mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
19 lines
458 B
JavaScript
19 lines
458 B
JavaScript
var express = require('express');
|
|
|
|
var app = express();
|
|
|
|
app.get('/user/:id', function(req, res) {
|
|
if (!isValidUserId(req.params.id)) {
|
|
// BAD: a request parameter is incorporated without validation into the response
|
|
res.send("Unknown user: " + req.params.id);
|
|
moreBadStuff(req.params, res);
|
|
} else {
|
|
// TODO: do something exciting
|
|
;
|
|
}
|
|
});
|
|
|
|
function moreBadStuff(params, res) {
|
|
res.send("Unknown user: " + params.id); // NOT OK
|
|
}
|