mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-27 20:29:39 +02:00
new capacity bits (#67)
This commit is contained in:
parent
afaffc0df6
commit
7d0e7320e2
261 changed files with 10591 additions and 231 deletions
9
tests/fixtures/header_injection/javascript/unsafe_set_header.js
vendored
Normal file
9
tests/fixtures/header_injection/javascript/unsafe_set_header.js
vendored
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
// Unsafe: Express `res.setHeader` receives a value built from req.query.
|
||||
// HEADER_INJECTION fires on the value argument.
|
||||
function handler(req, res) {
|
||||
const lang = req.query.lang;
|
||||
res.setHeader('X-Lang', lang);
|
||||
res.end();
|
||||
}
|
||||
|
||||
module.exports = handler;
|
||||
Loading…
Add table
Add a link
Reference in a new issue