File tree 1 file changed +4
-4
lines changed
javascript/ql/test/query-tests/Security/CWE-611
1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -2,14 +2,14 @@ const express = require('express');
2
2
const libxmljs = require ( 'libxmljs' ) ;
3
3
4
4
express ( ) . get ( '/some/path' , function ( req ) {
5
- libxmljs . parseXml ( req . param ( "some-xml" ) , { noent : true } ) ; // $ Alert // $ Alert - unguarded entity expansion
5
+ libxmljs . parseXml ( req . param ( "some-xml" ) , { noent : true } ) ; // $ Alert - unguarded entity expansion
6
6
} ) ;
7
7
8
8
express ( ) . post ( '/some/path' , function ( req , res ) {
9
- libxmljs . parseXml ( req . param ( "some-xml" ) , { noent : true } ) ; // $ Alert // $ Alert - unguarded entity expansion
9
+ libxmljs . parseXml ( req . param ( "some-xml" ) , { noent : true } ) ; // $ Alert - unguarded entity expansion
10
10
11
- libxmljs . parseXmlString ( req . param ( "some-xml" ) , { noent : true } ) // $ Alert // $ Alert - unguarded entity expansion
12
- libxmljs . parseXmlString ( req . files . products . data . toString ( 'utf8' ) , { noent : true } ) // $ Alert // $ Alert - unguarded entity expansion
11
+ libxmljs . parseXmlString ( req . param ( "some-xml" ) , { noent : true } ) // $ Alert - unguarded entity expansion
12
+ libxmljs . parseXmlString ( req . files . products . data . toString ( 'utf8' ) , { noent : true } ) // $ Alert - unguarded entity expansion
13
13
14
14
// OK - no entity expansion
15
15
libxmljs . parseXmlString ( req . files . products . data . toString ( 'utf8' ) , { noent : false } )
You can’t perform that action at this time.
0 commit comments