mirror of
https://github.com/github/codeql.git
synced 2026-06-14 09:21:07 +02:00
18b06f1cf4
Vercel API handlers more often return JSON than HTML, so res.send is not the only response body sink that matters. Mirror Express's ResponseJsonCall by also matching res.json(...) and res.jsonp(...) on the response (direct and chained), and exercise the new behavior in the library-test fixture. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
33 lines
1.1 KiB
TypeScript
33 lines
1.1 KiB
TypeScript
import type { VercelRequest, VercelResponse } from "@vercel/node";
|
|
|
|
// A private helper with the same signature. Must NOT be recognized as a
|
|
// route handler, since Vercel only invokes the default export.
|
|
function internalHelper(req: VercelRequest, res: VercelResponse) {
|
|
res.send(req.query.name);
|
|
}
|
|
|
|
export default function handler(req: VercelRequest, res: VercelResponse) {
|
|
// Request inputs
|
|
const q = req.query; // source: parameter
|
|
const b = req.body; // source: body
|
|
const c = req.cookies; // source: cookie
|
|
const u = req.url; // source: url (inherited from IncomingMessage)
|
|
const host = req.headers.host; // source: header (named)
|
|
const ref = req.headers.referer; // source: header (named)
|
|
|
|
// Response header definition
|
|
res.setHeader("Content-Type", "text/html");
|
|
|
|
// Response send (direct and chained)
|
|
res.send(q);
|
|
res.status(200).send(b);
|
|
|
|
// JSON response (direct and chained)
|
|
res.json(c);
|
|
res.status(200).json(u);
|
|
res.jsonp(host);
|
|
|
|
// Redirect
|
|
res.redirect(req.query.url as string);
|
|
}
|