We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
middleware
1 parent 86b64af commit 208487fCopy full SHA for 208487f
javascript/ql/test/query-tests/Security/CWE-918/Request/middleware.ts
@@ -0,0 +1,12 @@
1
+import { NextRequest, NextResponse } from 'next/server';
2
+
3
+export async function middleware(req: NextRequest) {
4
+ const target = req.nextUrl // $ MISSING : Source[js/request-forgery]
5
+ if (target) {
6
+ const res = await fetch(target) // $ MISSING: Alert[js/request-forgery] Sink[js/request-forgery]
7
+ const data = await res.text()
8
+ return new NextResponse(data)
9
+ }
10
+ return NextResponse.next()
11
+}
12
0 commit comments