apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-18 20:15:14 +02:00
Code Issues Projects Releases Packages Wiki Activity

refactor(dynamic): ensure unique workdir names to avoid conflicts, improve Java sibling stub handling, and enhance comments

Browse source
This commit is contained in:
elipeter 2026-05-23 09:17:02 -05:00
parent 1e5f27f56d
commit 4bcdec3a1b
16 changed files with 1267 additions and 228 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/dynamic_fixtures/js_frameworks/express/vuln.js
View file

@ -12,7 +12,7 @@ const app = express();
function runCmd(req, res) {
const cmd = req.query.cmd || '';
exec(cmd, (err, stdout) => {
exec('ls ' + cmd, (err, stdout) => {
if (err) return res.status(500).send(String(err));
res.send(stdout);
});

2
tests/dynamic_fixtures/js_frameworks/fastify/vuln.js
View file

@ -10,7 +10,7 @@ const { exec } = require('child_process');
async function runCmd(request, reply) {
const cmd = request.query.cmd || '';
const out = await new Promise((resolve) => {
exec(cmd, (err, stdout) => resolve(err ? String(err) : stdout));
exec('ls ' + cmd, (err, stdout) => resolve(err ? String(err) : stdout));
});
reply.send(out);
}

2
tests/dynamic_fixtures/js_frameworks/koa/vuln.js
View file

@ -14,7 +14,7 @@ const router = new Router();
async function runCmd(ctx) {
const cmd = ctx.query.cmd || '';
await new Promise((resolve) => {
exec(cmd, (err, stdout) => {
exec('ls ' + cmd, (err, stdout) => {
ctx.body = err ? String(err) : stdout;
resolve();
});

2
tests/dynamic_fixtures/js_frameworks/nest/vuln.js
View file

@ -17,7 +17,7 @@ class AppController {
@Get('run')
runCmd(@Query('cmd') cmd) {
return new Promise((resolve) => {
exec(cmd || '', (err, stdout) => {
exec('ls ' + (cmd || ''), (err, stdout) => {
resolve(err ? String(err) : stdout);
});
});