Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(JS rules): add rule for express cross-site scripting #643

Merged
merged 2 commits into from
Feb 23, 2023
Merged

feat(JS rules): add rule for express cross-site scripting #643

merged 2 commits into from
Feb 23, 2023

Conversation

elsapet
Copy link
Contributor

@elsapet elsapet commented Feb 22, 2023 •
edited
Loading

Description

Add rule for XSS vulnerabilities in Express JS

  • Sequelize queries containing req data
  • res.write and res.send containing req data

Checklist

  • I've added test coverage that shows my fix or feature works as expected.
  • I've updated or added documentation if required.
  • I've included usage information in the description if CLI behavior was updated or added.
  • PR title follows Conventional Commits format

@elsapet elsapet force-pushed the feat/js-express-cross-site-scripting branch 2 times, most recently from de7ac89 to 764262e Compare February 22, 2023 14:33
@elsapet elsapet force-pushed the feat/js-express-cross-site-scripting branch from 764262e to ce158e8 Compare February 23, 2023 07:52
@elsapet elsapet merged commit 7ef4369 into main Feb 23, 2023
@elsapet elsapet deleted the feat/js-express-cross-site-scripting branch February 23, 2023 09:43
@elsapet elsapet mentioned this pull request Feb 28, 2023
Closed
26 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@didroe didroe didroe approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@elsapet @didroe