mirror of
https://github.com/github/codeql.git
synced 2026-07-20 02:38:23 +02:00
24 lines
617 B
JavaScript
24 lines
617 B
JavaScript
var express = require('express');
|
|
var app = express();
|
|
// ...
|
|
app.get('/full-profile/:userId', function(req, res) {
|
|
|
|
if (req.cookies.loggedInUserId !== req.params.userId) { // $ Alert
|
|
requireLogin(); // $ Alert - login decision made based on user controlled data
|
|
} else {
|
|
// ... show private information
|
|
}
|
|
|
|
});
|
|
|
|
app.get('/full-profile/:userId', function(req, res) {
|
|
|
|
if (req.signedCookies.loggedInUserId !== req.params.userId) {
|
|
// OK - login decision made based on server controlled data
|
|
requireLogin();
|
|
} else {
|
|
// ... show private information
|
|
}
|
|
|
|
});
|