We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
axios.interceptors.response
1 parent 10498bb commit 20bb831Copy full SHA for 20bb831
javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/interceptors.js
@@ -0,0 +1,20 @@
1
+const express = require("express");
2
+const axios = require("axios");
3
+
4
+const app = express();
5
6
+axios.interceptors.response.use(
7
+ (response) => { // $ MISSING: Source
8
+ const userGeneratedHtml = response.data;
9
+ document.getElementById("content").innerHTML = userGeneratedHtml; // $ MISSING: Alert
10
+ return response;
11
+ },
12
+ (error) => {
13
+ return Promise.reject(error);
14
+ }
15
+);
16
17
+app.post("/fetch", (req, res) => {
18
+ const { url } = req.body;
19
+ axios.get(url);
20
+});
0 commit comments